last executing test programs: 4.045029298s ago: executing program 3 (id=539): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x2) ioctl$TIOCSTOP(r1, 0x2000746f) read(r0, &(0x7f0000000180)=""/181, 0xb5) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8, 0x8, 0x7, 0x2, 0x8, 0x3, 0x43, 0x10, [{0x3, 0x3, 0x7fff, 0x80000204}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x2}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x3, 0xf11, 0x7}, {0x800, 0x0, 0x8b}, {0x7, 0x5, 0x85, 0x2}, {0x2, 0xfffffffe, 0xfffffffa, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x17fff}, {0x101, 0x0, 0x5, 0x7}, {0x8, 0x8000004, 0x8, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x116, 0x6, 0x9}, {0x200003, 0xee2, 0x6, 0x5}, {0x7fff, 0x5, 0x3, 0x7fff}, {0xffffffff, 0x8005, 0x6, 0x7}]}) poll(&(0x7f0000000000), 0x35, 0x0) 3.833822875s ago: executing program 3 (id=550): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) mknod(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) socket(0x18, 0x3, 0x0) getrusage(0x0, &(0x7f0000000a80)) socket$inet(0x2, 0x1, 0x0) ioctl$DIOCRCLRASTATS(0xffffffffffffffff, 0xc4504448, &(0x7f0000000480)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x10, 0x81}, &(0x7f0000000300)=[{@broadcast, '\x00', './file0aaaaaaaaa', 0x1, 0x86, 0x18, 0x6, 0x5, 0x5, 0xb}, {@broadcast, '\x00', './file0aaaaaaaaa', 0x1, 0x4, 0x0, 0x5, 0x3, 0xf, 0x7}, {@broadcast, '\x00', './file0aaaaaaaaa', 0x1, 0x800, 0x1a, 0x0, 0x7f, 0x4}], 0x8, 0x3, 0x4, 0x9, 0x7fc, 0x10, 0x14, 0x8}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f0000000080)={0x1, 0x2, 0x87a, 0x2f, "2000030000000000000000000068a95a010400", 0x6, 0x2}) 2.600820341s ago: executing program 3 (id=557): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40006381) mknod(&(0x7f0000000100)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) 2.480392065s ago: executing program 1 (id=566): openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) shutdown(r1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f00000004c0)=0x200, 0x4) 1.972516761s ago: executing program 5 (id=584): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r0}) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x1c) 1.910530799s ago: executing program 3 (id=588): r0 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r3, r3, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000780)={{r2, r3, r2, r3, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = semget(0x0, 0x1, 0x42) semop(r4, &(0x7f0000000300)=[{0x0, 0x8001, 0x1800}], 0x1) 1.868291933s ago: executing program 0 (id=591): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xfffffff9, 0x6, 0x5, 0x181, 0x1, 0x1, 0x3, 0x10, [{0x20005, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0xb7fe, 0xf, 0x7}, {0x100004, 0x4, 0x1fc000, 0x2}, {0x274, 0x9, 0x200, 0xfffffffb}, {0x4, 0x3, 0xe, 0x7}, {0x2000002, 0x20048000, 0x5, 0xff}, {0x80000000, 0xbffffff5, 0x4, 0x6d}, {0x99d, 0x8, 0xfded, 0x4}, {0x80f, 0x44c7, 0x1, 0x8000}, {0xfffffc00, 0x0, 0x10001, 0x1}, {0x800, 0xfff8, 0x2, 0xe1}, {0x8000, 0x5, 0x8, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x8000, 0x0, 0xffff0001, 0xfffffff8}, {0x2, 0x5, 0x172000, 0x2000b}, {0x81, 0xf3, 0x7, 0x4}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x938, 0x20800c1, 0xf, 0x0, 0x1040807, 0x10050001, 0xfffffffe, 0x2, 0x2, 0xd, 0xf5fffffffffffff9}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 1.837412257s ago: executing program 6 (id=596): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x9, 0x100ff, 0x10000, 0x0, 0x0, 0x3, 0x8, 0x2, 0x0, 0x2000004, 0x6}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) r2 = open(&(0x7f0000000800)='./file1\x00', 0x8000, 0xba) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) 1.734088883s ago: executing program 2 (id=600): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7, 0x5, 0x81, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x9, 0x3, 0x40}, {0xfffffff3, 0xfffffffe, 0x9, 0x9}, {0x20007, 0x18000b86, 0x3, 0x9}, {0x1, 0x6, 0x5, 0x200}, {0x42, 0x1, 0x2, 0x800007}, {0x4020002, 0x8, 0x7, 0x95}, {0x9, 0xdf61, 0x6, 0x1010}, {0x6, 0x11, 0x14, 0x11}, {0xfffffffd, 0xe2b3, 0x40000003, 0xa}, {0x4, 0x8a, 0x401, 0x1ff}, {0x1e6, 0x1, 0x927c, 0x4}, {0x3, 0x25, 0x9, 0x2d0b}, {0x1, 0x80000002, 0x80002001, 0x100}, {0x29a7171a, 0x8, 0x3, 0x2579}, {0x8000, 0xf8f, 0x8}, {0xfffffffd, 0x800bd3d, 0xf779, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x0}) r1 = socket(0x800000018, 0x1, 0x0) listen(r1, 0x1) accept$unix(r1, 0x0, 0x0) shutdown(r1, 0x2) 1.682984208s ago: executing program 5 (id=601): r0 = socket(0x11, 0x3, 0x8) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x5, 0x6, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x3, 0x1}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0xc, &(0x7f00000001c0), 0x15, 0x0) unlink(&(0x7f0000000300)='.\x00') r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x88) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) sendto$unix(r0, &(0x7f0000000280)="b1000501600000001700000007000000085c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38385291f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x40a, 0x0, 0x0) execve(0x0, &(0x7f0000000340)=[0x0, &(0x7f00000001c0), 0x0], 0x0) 1.679591079s ago: executing program 0 (id=602): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(0x0, 0x2000, 0x6381) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) open(0x0, 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x9, 0xfc, 0x10000, 0x0, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2000004, 0x6}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2009, 0x637b) r1 = open(&(0x7f0000000800)='./file1\x00', 0x8000, 0xba) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) 1.677829577s ago: executing program 7 (id=603): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) mmap(&(0x7f0000404000/0x1000)=nil, 0x1000, 0x1, 0x2011, r0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r1, &(0x7f0000001480)=[{&(0x7f0000000100)="cc", 0x1}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x2, &(0x7f0000000300), 0x0, 0x0, 0x0) mmap(&(0x7f0000234000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x30001) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 1.585327475s ago: executing program 1 (id=604): r0 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(0x0, r5, r5) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000780)={{r2, r3, r2, r3, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semget(0x0, 0x2, 0x1c2) 1.550382876s ago: executing program 0 (id=605): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r1, r1, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x2400000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 1.547271725s ago: executing program 4 (id=606): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xfff, 0x4e, 0x2100009, 0x6, 0x1, 0xa, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71000}, {0x8, 0xb, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000002, 0x99}, {0xce1, 0x2, 0x4f8, 0x6d}, {0x6, 0x300, 0x55, 0x40000008}, {0x2, 0x0, 0x7, 0x8}, {0x8007, 0x8001, 0x0, 0x103}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x200007ff, 0x3, 0xfffffffd, 0x1}, {0xb8c, 0x5, 0x8, 0xe}, {0x29a71717, 0x80, 0x1, 0xc377}, {0x0, 0x407, 0x5}, {0x8000, 0x8000001, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) kill(0xffffffffffffffff, 0x1f) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8001, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x48e}, 0x5, 0x8, 0x0, 0x0, 0x100000002, 0x4000000000003, 0x20000000007f, 0x40000000000000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 1.545561159s ago: executing program 5 (id=607): kqueue() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8c) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x40, 0x102, {[0xfffffbfffffffff9, 0x0, 0x2, 0xc, 0x6, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x2, 0xa, 0xffffffffffffffff, 0x0, 0x8, 0x4, 0x2, 0x100], [0x5304, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe, 0xffffffffffffffff, 0x0, 0x9467], [0x2, 0x8f9b, 0x1000000002, 0x5, 0xb, 0x11000, 0xffffffff00000000], [0x100, 0xffd6, 0x6, 0x100000000, 0xfffffffffffffffe, 0x6], [{0x1000, 0x4, 0x0, 0x7d06}, {0xfffc, 0xa, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0x0, 0x2, 0x9, 0xfffffffffffffffb}, {0x0, 0x28291c58, 0x9, 0x2000000000000004}, {}, {0x81, 0x100, 0x0, 0x8}], {0x9, 0x5, 0x800}, {0xfffe, 0x80000000, 0x8, 0x4}}}) r0 = kqueue() kqueue() poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) kevent(r0, &(0x7f0000000240), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000580)={0x2, 0x100, 0x4, 0x10000, "000800000a00000f000000aff0338a6b4fc6d780", 0x4, 0x7}) 1.533689129s ago: executing program 6 (id=608): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_pts() close(r0) r1 = msgget(0x2, 0x600) socket(0x18, 0x2, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) msgctl$IPC_STAT(r1, 0x2, 0x0) msgctl$IPC_RMID(r1, 0x0) 1.521758413s ago: executing program 7 (id=609): open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) r0 = kqueue() socket(0x10, 0x1000, 0x9) kevent(r0, 0x0, 0x0, 0x0, 0x4, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0x7, 0x0, 0x8, 0x100200000, 0x8, 0x8, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x101, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x8000000000000001], [0xfffffe0000000002, 0x80000001, 0x1, 0x525, 0x6, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x8, 0x22, 0x5, 0xffffffbffffffff9}, {0x4, 0x4, 0xfffffffe, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x100009, 0xe7, 0x2000000000000002}, {0x7f, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x2, 0x3}, {0xfbfe, 0x6811, 0x6d9, 0x4}}}) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000140)={0xfffffffe, 0x101, {0x3}}) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@local, @random="00e0300eaaf8", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x39, 0x20, 0xfffd, 0x0, 0x7, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}, {[@lsrr={0x83, 0x3, 0xc}]}}, @icmp=@generic={0xa, 0xdf, 0x0, "cc24847e"}}}}}) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 1.518721224s ago: executing program 1 (id=610): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x1, 0xfb, 0xf9, 0x3}]}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) r1 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc028756b, &(0x7f0000000100)) 1.502385829s ago: executing program 0 (id=611): r0 = socket(0x18, 0x3, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x14, 0xe}, {0xfffffffd, 0xe2b4, 0x40000003, 0x6}, {0x4, 0x8e, 0x410001, 0x1ff}, {0x1e6, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x6, 0x2d0b}, {0x3, 0x2, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x208}, {0xfffffffd, 0x800bd3d, 0xf778, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f0000000100)) 1.494610512s ago: executing program 1 (id=612): r0 = socket(0x1, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) r3 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) readv(r1, &(0x7f0000001640)=[{0x0}], 0x1) 1.455213362s ago: executing program 2 (id=613): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xf, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0xfffe, 0x0, 0x87a2}}}}}}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) shutdown(r1, 0x1) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f00000004c0)=0x200, 0x4) select(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0) 1.43045688s ago: executing program 2 (id=614): open(0x0, 0x9cab835cfdc52675, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x30, 0x85, 0xd}, {0x40, 0x5, 0xff, 0x40}, {0x6, 0x80, 0x80, 0xfffff800}]}) syz_emit_ethernet(0x22, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffca0f0000000008baafccd14f1eca650fffff9078ffffffffdfffffff"]) connect$inet(r0, &(0x7f0000000400)={0x10, 0x2, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2, 0x2, 0x200}, 0x10) setreuid(0xee00, 0x0) ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x510, 0x0) setgid(0xffffffffffffffff) getrusage(0x1, &(0x7f00000001c0)) 1.416422147s ago: executing program 2 (id=615): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r0, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000800)="a5d3f4eccd44", 0x6}], 0x1) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r2, 0x20007461) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000000c0)={0x2df57367, 0xffffc765, 0xd, 0xfdff7dfc, "0a6400b70700605c9b0051696203000000020400", 0x4, 0x10003ff}) writev(r1, &(0x7f0000002240)=[{&(0x7f0000001180)="79c7ad670c7873b36af10c4ff36c4cdd7929ab745c3a68b309be28cd54dd99a14fd07bbd90e9480c9a5b9a7c324b6e1d21527102102200ba1ef125caf779ae81cc455e0627145b54618d4a7eaa485178dfde771c530c962b072d494583c80a367fd1b829daed3809f4f3d5ae4fd18aa1803a44c519d2637cb30bebe6d5892727cf0d16b8edfba3288add182209ce58d6e8b7167397a114d999514c68285e03d89416dfb22e6a7614ff7b726c8238361d418cd4be6727596f5984cc2d69362b6415679dca7ee02abbdcf7", 0xca}], 0x1) 1.405253511s ago: executing program 7 (id=616): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x6a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0xc, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x4}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x0, 0x9}, {0x4, 0x8001, 0xd1b, 0x100}, {0x1ce, 0x10001, 0xf7, 0x3}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0xec}, {0x8000, 0x1, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) 1.385100207s ago: executing program 0 (id=617): setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = syz_open_pts() close(r0) syz_open_pts() socket(0x18, 0x2, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, 0x0) ioctl$DIOCRCLRTSTATS(0xffffffffffffffff, 0xc4504441, &(0x7f0000001500)={{'./file0\x00', './file0\x00', 0x58f4fbd0c1a6ff99, 0x7f}, &(0x7f0000000880)=[{'./file0\x00', './file0\x00', 0x10, 0x1}, {'./file0\x00', './file0\x00', 0x20}, {'./file0\x00', './file0\x00', 0x51, 0x4}], 0xa2, 0x3, 0x6, 0xfffffffd, 0x7fff, 0x8, 0x0, 0xffffffff}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) open(0x0, 0x0, 0x0) select(0x7, &(0x7f00000002c0)={0xfffffffffffffffc}, 0x0, 0x0, 0x0) 1.384632864s ago: executing program 4 (id=618): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0284408, 0x0) r2 = open(0x0, 0x80, 0x2a) ioctl$VNDIOCSET(r2, 0x80184404, 0x0) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) setrlimit(0x1, &(0x7f00000011c0)) closefrom(r1) munmap(&(0x7f0000000000/0xa000)=nil, 0xa000) 1.343502315s ago: executing program 5 (id=619): openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x1, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) r3 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080)=0x6, 0x4) 1.254761097s ago: executing program 4 (id=620): r0 = syz_open_pts() close(r0) writev(r0, 0x0, 0x0) socket$inet6(0x18, 0x1, 0x6) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) closefrom(r1) 1.254359833s ago: executing program 5 (id=621): truncate(0x0, 0x30001) open(0x0, 0x80000000000206, 0x10) r0 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r3, r3, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000780)={{r2, r3, r2, r3, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) r4 = semget(0x0, 0x1, 0x281) semctl$SETVAL(r4, 0xf6aa1cd8b48bbe66, 0x8, 0x0) 1.254069808s ago: executing program 4 (id=622): openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {0x0, 0x4000}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x3, 0x6}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x1, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x1, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) r3 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) 1.253758498s ago: executing program 7 (id=623): r0 = socket(0x18, 0x9002, 0x0) close(0x3) r1 = geteuid() fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x1c0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0x8, 0x0, 0x3, 0x400000000009, 0x0, 0x8000000000000001}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0x37) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), 0x0) r4 = getppid() getsid(r4) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{r1, r2, 0x0, r3, 0x19, 0xa, 0x0, 0x0, 0x6}, 0xb629, r4, 0x0, 0x1, 0x0, 0x5, 0x0, 0x9, 0xf, 0xb}) connect$inet6(r0, 0x0, 0x0) 1.173528766s ago: executing program 4 (id=624): r0 = socket$inet(0x2, 0x3, 0x2) setrlimit(0x8, 0x0) r1 = syz_open_pts() close(r1) syz_open_pts() syz_emit_ethernet(0x1000e, 0x0) syz_emit_ethernet(0x138, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = msgget(0x2, 0x600) msgrcv(r2, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0x3, 0x81, 0xbc30, 0x0, 0x0, 0xf732, 0x0, 0x4, 0x0, 0x2}) 1.17318745s ago: executing program 7 (id=625): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f0000000600)=[{0x0, 0xff, 0x2, 0x8}, {0x25, 0x0, 0x2, 0x5}, {0x81, 0x9, 0xb4, 0x6}, {0x4, 0xff, 0x19, 0x80008}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) openat$zero(0xffffffffffffff9c, 0x0, 0x10000, 0x0) symlink(&(0x7f0000000900)='.\x00', &(0x7f0000000240)='./file0\x00') setreuid(0xee00, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) 1.172815684s ago: executing program 1 (id=626): ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x3c000000, 0x200, 0xf, 0x0, 0x1040807, 0x10050001, 0xfffffefe, 0x2, 0x2, 0xd, 0xf5fffffffffffff9}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) bind(r0, &(0x7f0000000000)=@un=@file={0x9a, 0x1, './file0\x00'}, 0xa) socket(0x18, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setitimer(0x2, &(0x7f0000000140)={{0x1, 0x9}, {0xffffdff0, 0x8020000000000003}}, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c) read(r1, &(0x7f0000000080)=""/117, 0x75) syz_emit_ethernet(0x11d, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0xe7, 0x0, 0x30, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x2b, 0x4, 0x0, 0x1b, 0x0, [@mcast2, @remote={0xfe, 0x80, '\x00', 0x0}]}], @icmpv6=@param_prob={0x4, 0x1, 0x0, 0x80, {0xc, 0x6, "36853b", 0x7, 0x25, 0x7, @empty, @mcast1, [@fragment={0x3, 0x0, 0x5, 0x0, 0x0, 0x2, 0x67}], "077a7303f83ad3738a53e649d9c55f88cd353bc38e1c294351839cb0f6674a32b371712d04689764f0ee56c3b15133d345e64ee4d52dd57eda720da018f656223ae3e8c014c6d91072b668a9098a766d64b927097f3676979842ed1dc2d52ffedc1f53803c832d717c86e8d708b92c7dd7a9ad5f15096dca8f8a911d89efb2c0a9bff753802483"}}}}}}}) 1.172468806s ago: executing program 0 (id=627): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r0, &(0x7f0000000140)="4db29a6e", 0x4) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504444, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close(r1) r2 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r2, 0x20007461) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000000c0)={0x2df57367, 0xffffc765, 0xd, 0xfdff7dfc, "0a6400b70700605c9b0051696203000000020400", 0x4, 0x10003ff}) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="032ac9323d9e00c8d038ce9e061f6cef3e1077dda782d6a8cc89dc382d8233c811f66a8210fa7d25c36d72b55e5e5972b07cbdcd20ac1d2818097af604", 0x3d}], 0x1) 126.884471ms ago: executing program 5 (id=628): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x29, 0x9, 0x10004, 0x1, 0x0, 0x3, 0x7, 0x2, 0x0, 0x2000004, 0x6}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r2 = open(&(0x7f0000000800)='./file1\x00', 0x8000, 0xba) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x209, 0x40009, 0x4, 0x0, 0x8000000a, 0x2, 0x8, 0x2, 0x0, 0x2000004, 0x2}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) closefrom(r0) 123.849078ms ago: executing program 3 (id=629): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x5, 0x3, 0x40}, {0xfffffff3, 0xfffffffb, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x7, 0x6, 0x2, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x4020002, 0x8, 0x8, 0x109d7}, {0x9, 0xdf61, 0x200004f8, 0x10}, {0x3, 0x11, 0x14, 0xe}, {0xfffffffd, 0xe2b4, 0x40000003, 0xa}, {0x4, 0x8a, 0x400, 0x1ff}, {0x1e6, 0x400fff9, 0x927c, 0x4}, {0x3, 0x25, 0x9, 0x2d0b}, {0x1, 0x2, 0xa, 0x408}, {0x29a7171a, 0x8, 0x3, 0x2579}, {0x8000, 0xf8f, 0x8}, {0x10000, 0x800bd3d, 0xf779, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x3, 0x85) ioctl$FIONREAD(r1, 0xc1206949, &(0x7f00000001c0)) 122.616193ms ago: executing program 6 (id=630): getsockopt(0xffffffffffffffff, 0x7, 0xf, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x100}, {0x1ce, 0x10001, 0xf7, 0x3}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000140)={0x5, 0x100, 0x4, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) 121.888422ms ago: executing program 4 (id=631): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x4, 0x0, 0xc14}, {0x0, 0x7, 0x0, 0x1}, {0x6, 0x0, 0x45, 0x10000}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x7bf, 0x8, 0xffffdf82, 0xffffff8c, "08ed957f0000000080ffff44ffff00ffe600", 0x4, 0x4}) write(r1, &(0x7f0000000580)="9ca812d8e8208aab2546358c134cdfd305def0701d8080203e9fc5f58a8b195d67fb65b254295272582b552eeaf971864708a135a2e10841d3a5ed5a58461fa8945ad74583fbea00d345abb77105baf4a2897cc7155a", 0x56) ioctl$FIONREAD(r0, 0x8020691f, &(0x7f00000001c0)) getitimer(0x1, &(0x7f0000000040)) 90.499347ms ago: executing program 6 (id=632): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "975203", 0x14, 0x3c, 0x3, @rand_addr="062cbb115fca75ae1edf860e8f8c9704", @mcast2, {[], @tcp={{0x1, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0x1e6, 0x0, 0x8001}}}}}}}) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x1, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) r3 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) setsockopt$sock_int(r3, 0xffff, 0x1023, 0x0, 0x0) 89.932527ms ago: executing program 1 (id=633): r0 = socket(0x18, 0x3, 0x3a) getsockopt(r0, 0x29, 0x65, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mknod(0x0, 0x2000, 0x1e5f) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xe2) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x7, 0x1, 0x71002}, {0x3, 0xe, 0x8, 0xfffffff9}, {0x80000101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x800f, 0x7}, {0x3fd, 0xffff, 0x2800, 0xb}, {0x200001, 0x650, 0x3, 0x9b}, {0x8ce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x5, 0x14, 0x5910}, {0x86000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1d0, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x3, 0x8}, {0x29a71717, 0x9, 0x60, 0x7}, {0x6, 0xfffffffa, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x230003}]}) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000340)='./file1\x00', 0x200, 0xc) mmap(&(0x7f00002e6000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x100000000000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 89.480614ms ago: executing program 6 (id=634): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) socket(0x800000018, 0x1, 0x0) kqueue() open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) kill(0xffffffffffffffff, 0x1f) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8001, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x48e}, 0x5, 0x8, 0x0, 0x0, 0x100000002, 0x4000000000003, 0x20000000007f, 0x40000000000000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 89.15806ms ago: executing program 7 (id=635): r0 = socket(0x1, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040)=0x3, 0x4) 1.587755ms ago: executing program 6 (id=636): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x9, 0x100ff, 0x10000, 0x0, 0x0, 0x3, 0x8, 0x2, 0x0, 0x2000004, 0x6}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) r2 = open(&(0x7f0000000800)='./file1\x00', 0x8000, 0xba) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x209, 0x409, 0x4, 0x1, 0x8000000a, 0x2, 0x8, 0x0, 0x0, 0x2000004, 0x20002}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) close(r2) 918.591µs ago: executing program 2 (id=637): open(&(0x7f0000000140)='./file0\x00', 0x615, 0x4) setgroups(0x0, 0x0) r0 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xee01) r1 = socket(0x18, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ff3177f8ffff00200000004000000001", 0x7}, 0x1c) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) pipe(&(0x7f0000000080)) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) sendmmsg(0xffffffffffffffff, &(0x7f0000001940)={{0x0, 0xfffffffffffffda9, 0x0, 0x64, 0x0}}, 0x38, 0x802) unveil(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='c\x00') 411.246µs ago: executing program 2 (id=638): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xd27d43220c7fd9f, 0x0) mknod(0x0, 0x2000, 0x33b9) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x7fff}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000593000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x1}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1135, 0x0, 0x0, 0x80c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x15340, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd824, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff]}) r1 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x10622, 0x0) chdir(&(0x7f0000000000)='./file0\x00') ftruncate(r0, 0x8531) 0s ago: executing program 3 (id=639): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x9, 0xff, 0x10000, 0x0, 0x0, 0x3, 0x8, 0x2, 0x0, 0x2000004, 0x6}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) r2 = open(&(0x7f0000000800)='./file1\x00', 0x8000, 0xba) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x209, 0xfff, 0x4, 0x0, 0x8000000a, 0x2, 0x8, 0x2, 0x0, 0x2000004, 0x2}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) close(r2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. lo0: can't handle af0 pckbd_enable: command error Connection to 10.128.1.5 closed by remote host. ktrace write failed, errno 27, tracing stopped pppx: unable to set addresses for pppx1, error=17 OpenBSD/amd64 (ci-openbsd-main-2.us-central1-b.c.syzkaller.internal) (tty00) login: ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped pckbd_enable: command error ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped pckbd_enable: command error ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped nd6_resolve: ::: route contains no ND information ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped pckbd_enable: command error ktrace write failed, errno 27, tracing stopped uvn_flush: obj=0xfffff30067fae380, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error init: getty repeating too quickly on port /dev/tty00, sleeping ktrace write failed, errno 27, tracing stopped uvm_fault(0xffffffff83ad71f0, 0xffff800027f82004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *317449 849 0 0 0x4000000 0 syz-executor ufs_lookup() at ufs_lookup+0x613 VOP_LOOKUP(fffff3006abcba70,ffff80002a761810,ffff80002a761840) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a7617e0) at vfs_lookup+0x94a namei(ffff80002a7617e0) at namei+0x7c3 vn_open(ffff80002a7617e0,10223,0) at vn_open+0x22e doopenat(ffff800035cc4fb8,ffffff9c,200000000000,10622,0,0,91ccb061a7abde70) at doopenat+0x352 sys_openat(ffff800035cc4fb8,ffff80002a761a80,ffff80002a7619d0) at sys_openat+0x58 syscall(ffff80002a761a80) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x407a0e8d990, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83ad71f0, 0xffff800027f82004, 0, 1) -> d ddb> trace ufs_lookup() at ufs_lookup+0x613 VOP_LOOKUP(fffff3006abcba70,ffff80002a761810,ffff80002a761840) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a7617e0) at vfs_lookup+0x94a namei(ffff80002a7617e0) at namei+0x7c3 vn_open(ffff80002a7617e0,10223,0) at vn_open+0x22e doopenat(ffff800035cc4fb8,ffffff9c,200000000000,10622,0,0,91ccb061a7abde70) at doopenat+0x352 sys_openat(ffff800035cc4fb8,ffff80002a761a80,ffff80002a7619d0) at sys_openat+0x58 syscall(ffff80002a761a80) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x407a0e8d990, count: -9 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002a761440 rbx 0 rdx 0xffff8000015e2180 rcx 0xffffffff rax 0xffff800035cc4fb8 r8 0xffffffffffffffff r9 0xfffff30007ffd958 r10 0xc6962fd46d2fb69d r11 0xf0b144056ea16041 r12 0xfffff30067db6ee0 r13 0 r14 0 r15 0xffff800027f82000 rip 0xffffffff82041cb3 ufs_lookup+0x613 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a761350 ss 0x10 ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx ddb> show proc PROC (syz-executor) tid=317449 pid=849 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800035cc4a88,0xffff800035cc4800 process=0xffff807fffff9218 user=0xffff80002a75c000, vmspace=0xfffff30076050170 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 34253 250733 88223 0 2 0 syz-executor 34253 383671 88223 0 3 0x4000080 fsleep syz-executor 849 400730 83827 0 2 0 syz-executor * 849 317449 83827 0 7 0x4000000 syz-executor 34657 501028 1 0 3 0x80 nanoslp init 57789 134951 54762 0 2 0 syz-executor 57789 68069 54762 0 3 0x4000080 fsleep syz-executor 11444 350795 7309 0 2 0 syz-executor 11444 269992 7309 0 3 0x4000080 fsleep syz-executor 54762 234353 11609 0 2 0xc82 syz-executor 88223 25674 11609 0 2 0xc82 syz-executor 83827 91661 11609 0 2 0xc82 syz-executor 7309 492383 11609 0 2 0xc82 syz-executor 11609 267591 1 0 3 0x82 wait syz-executor 83557 505530 0 0 3 0x14200 bored smr 11633 110679 0 0 2 0x14200 zerothread 33320 381303 0 0 3 0x14200 aiodoned aiodoned 15158 134883 0 0 3 0x14200 syncer update 57051 261903 0 0 3 0x14200 cleaner cleaner 2858 513749 0 0 3 0x14200 reaper reaper 59343 242640 0 0 3 0x14200 pgdaemon pagedaemon 33512 190404 0 0 3 0x14200 bored viomb 66781 325198 0 0 3 0x40014200 acpi0 acpi0 31356 501123 0 0 2 0x14200 softnet0 64268 262950 0 0 3 0x14200 smrbar systqmp 68287 219742 0 0 3 0x14200 bored systq 12402 256985 0 0 3 0x40014200 tmoslp softclock 55355 247490 0 0 3 0x40014200 idle0 1 512916 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb>