last executing test programs:

6.174828965s ago: executing program 7 (id=2612):
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e702f2ff"])
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}})
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
ftruncate(0xffffffffffffffff, 0x8531)

6.158715066s ago: executing program 7 (id=2614):
socket(0x18, 0x3, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
pipe(&(0x7f0000000100))
open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
pipe(&(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29)
ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0})
ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
read(r0, 0x0, 0x0)

5.767586673s ago: executing program 7 (id=2624):
r0 = socket(0x2, 0x2, 0x0)
r1 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r1, 0x0, 0x1f, &(0x7f0000000080)="c5f5d915", 0x4)
dup2(r1, r0)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x8000000000000000, 0x0, 0x1, 0x9ce8, 0x0, 0x0, 0xb160}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind(r0, &(0x7f0000000000), 0x10)
r2 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4)
connect$unix(r2, &(0x7f0000000000), 0x10)
write(r2, 0x0, 0x0)

5.754618164s ago: executing program 7 (id=2626):
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, 0x0)
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
close(r1)
socket(0x2, 0x1, 0x0)
poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0)
socket$inet(0x2, 0x3, 0xd)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0)
ioctl$WSKBDIO_SETMAP(0xffffffffffffffff, 0x8010570e, 0x0)
r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
close(r3)

5.564480667s ago: executing program 7 (id=2630):
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
r0 = syz_open_pts()
close(r0)
r1 = syz_open_pts()
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4})
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)
r2 = socket$inet(0x2, 0x3, 0xfc)
ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000))

4.646237347s ago: executing program 7 (id=2659):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
socket(0x1, 0x1, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0)
pipe2(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
writev(r2, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1)
close(r3)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)

2.403566408s ago: executing program 0 (id=2699):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x82, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x6, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
socket(0x1, 0x2, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a)
r1 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0)
ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f00000001c0)={0x3})
r2 = openat$bpf(0xffffffffffffff9c, 0x0, 0x8, 0x0)
ioctl$BIOCSETF(r2, 0x80104267, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket$inet(0x2, 0x1, 0xc0)
fchdir(r3)
getsockopt(r3, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0xfe)

2.323443051s ago: executing program 2 (id=2703):
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62})
r0 = syz_open_pts()
ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000001c0)={0xffffffff, 0x3ff, 0x97, 0xeffdffdd, "8b03007d693ecfd3f82e19c3a306d3c900", 0x19, 0x2})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = open(&(0x7f0000000640)='./file0\x00', 0x70e, 0x10c)
r4 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8)
readv(r1, &(0x7f0000000200)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r5, &(0x7f00000004c0)="b9", 0x1)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r4, 0x0)
pwrite(r3, &(0x7f0000001080)='q', 0x1, 0x9)
execve(0x0, 0x0, 0x0)
write(r2, &(0x7f0000000140)="e6", 0x1)
ioctl$FIONBIO(0xffffffffffffffff, 0xc0307004, 0x0)
r6 = openat$wsmuxmouse(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(0x0, 0x40, 0x8a)
ioctl$TIOCEXCL(r6, 0x2000740d)

2.196814613s ago: executing program 0 (id=2707):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{}, 0x1, 0x8003, 0x2})
ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x6000)
r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0)
r2 = kqueue()
kevent(r2, 0x0, 0x0, 0x0, 0x2, 0x0)
unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='x\x00')
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f000029f000/0x2000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfb}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7fd}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000123000/0x3000)=nil, &(0x7f0000369000/0x3000)=nil, 0x4}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffff9}, {&(0x7f0000283000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xc8}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0x8}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000148000/0x1000)=nil, &(0x7f00001ae000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x2}], './file0\x00', 0xfffffffa})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$FIONREAD(r3, 0x801169ab, &(0x7f00000001c0))
r4 = socket(0x18, 0x3, 0x0)
r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0)
ioctl$BIOCGRTIMEOUT(r5, 0x4010426e, &(0x7f0000000340))
setsockopt(r4, 0x1000000029, 0x4, 0x0, 0x0)
unveil(0x0, &(0x7f00000002c0)='c\x00')
getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x100, 0x0, 0x0)
ioctl$PCIOCWRITE(r1, 0xc00c7007, &(0x7f00000005c0)={{}, 0x2, 0x800002})

1.973017266s ago: executing program 2 (id=2710):
close(0xffffffffffffffff)
mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802)
mknod(0x0, 0x2000, 0x1e61)
r0 = open(0x0, 0x80, 0x29)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0)
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000001c0)={0x10, 0x10000009, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000a5000/0x2000)=nil, 0x10}, {&(0x7f00003c6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3}, {&(0x7f0000301000/0x1000)=nil, &(0x7f0000ff6000/0x8000)=nil, 0xa}, {&(0x7f00000d9000/0x4000)=nil, &(0x7f0000507000/0x3000)=nil}, {&(0x7f00001dd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x9}, {&(0x7f00002b8000/0x4000)=nil, &(0x7f00003d0000/0xa000)=nil, 0x2dc}, {&(0x7f0000110000/0x3000)=nil, &(0x7f00000ce000/0x3000)=nil, 0x9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000240000/0x4000)=nil, 0xffffffff}, {&(0x7f000013a000/0x2000)=nil, &(0x7f0000375000/0x1000)=nil, 0x4}, {&(0x7f00000a0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3ff}, {&(0x7f00000f9000/0x2000)=nil, &(0x7f00005b1000/0x4000)=nil, 0x2}, {&(0x7f000073b000/0x1000)=nil, &(0x7f000016d000/0x4000)=nil, 0x4}, {&(0x7f00000c8000/0x4000)=nil, &(0x7f00001f4000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f00003f2000/0x3000)=nil, &(0x7f00000a7000/0x1000)=nil, 0x16629c0e}, {&(0x7f0000027000/0x4000)=nil, &(0x7f0000448000/0x2000)=nil}, {&(0x7f00000f7000/0x1000)=nil, &(0x7f00000cc000/0x3000)=nil, 0xfffffffffffffff8}], './file0\x00', 0x84})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
socket$inet(0x2, 0x3, 0x102)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002)
sysctl$kern(&(0x7f00000016c0)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0}, 0x10, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$VNDIOCSET(r0, 0x80044403, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
r2 = kqueue()
kevent(r2, &(0x7f00000003c0)=[{{}, 0xfffffffffffffffd, 0x58, 0x10, 0x4, 0x28a}, {{}, 0x7ffffffffffffffc, 0x90, 0x80000000, 0x666, 0x5}], 0xff, &(0x7f0000000200)=[{{r1}, 0xfffffffffffffff9, 0x84, 0xecb7213d82e63c60, 0x3, 0x5}, {{}, 0xfffffffffffffffb, 0x40, 0x1, 0x6, 0x100}, {{r1}, 0xfffffffffffffffa, 0x22, 0x10, 0x6c6, 0x5}], 0xf8, &(0x7f0000000140)={0x1, 0x7})
ioctl$TIOCSETA(r1, 0xc4504446, &(0x7f0000000740)={0x10002f, 0x1, 0x2, 0x5, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x810})

1.972134268s ago: executing program 3 (id=2711):
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0)
r0 = getpid()
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0)
setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f})
r1 = socket(0x24, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x40)
setitimer(0x2, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000045c0)=ANY=[])
r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)

1.841440698s ago: executing program 3 (id=2714):
sysctl$kern(&(0x7f0000000000)={0x1, 0x16}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x6)
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000580), 0x0)
syz_emit_ethernet(0x66, 0x0)
mprotect(&(0x7f00007e8000/0x2000)=nil, 0x2000, 0x2)
sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4)
setrlimit(0x1, 0x0)
ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0)
setuid(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540), 0x1000000000000133, 0x0}, 0x42)

1.705135392s ago: executing program 2 (id=2715):
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x5)
setuid(0xee01)
shmget(0x2, 0x3000, 0x602, &(0x7f00000f7000/0x3000)=nil)
shmget(0x2, 0x3000, 0x446, &(0x7f00000f8000/0x3000)=nil)
openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x24, 0x0, 0x0)
sendmsg(r1, 0x0, 0xe)
socket(0x18, 0x3, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0)
openat$wsmuxmouse(0xffffffffffffff9c, 0x0, 0x20, 0x0)
syz_emit_ethernet(0x0, 0x0)

1.560836322s ago: executing program 0 (id=2718):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r0 = socket(0x18, 0x3, 0x0)
r1 = socket(0x1, 0x2, 0x0)
write(r0, &(0x7f0000000280)="74ba7c67a8caf3e34c14b147b0f6838fc8923fafbaa484ed510571ee2db9273a0df621ff3c659bac0de8299f558da8ea9036ab2eb9ac28433b99dd27e95fc5a4cf9bb934dc6be74d287a3d4b64aa65506aeb18a1f0de129648b1c0c11464c109f1ca34b7d94813767c939a07599461a8e78f61d527b360bf69cf29235d46ae396f6da4de124f6442a1c6efbc07b0549c50c6545bdaf17e08982ad8958206", 0x9e)
ioctl$FIONREAD(r1, 0xc0106924, 0x0)
ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0)
execve(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x8080691a, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, 0x0)
socket$inet(0x2, 0x3, 0x0)
ioctl$FIONREAD(r0, 0xc1206925, 0x0)
r2 = socket(0x11, 0x3, 0x0)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080), 0xc)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
readv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/46, 0x1b}], 0x1)
read(r4, &(0x7f0000000100)=""/127, 0x7f)
close(r3)
execve(0x0, 0x0, 0x0)
sendto$unix(r2, &(0x7f00000000c0)="b1000516", 0x4, 0xa, 0x0, 0x0)
ioctl$PCIOCREAD(r3, 0xc0107002, 0x0)

1.559710023s ago: executing program 3 (id=2719):
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00000dc000/0x12000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfb}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7f9}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f00003d5000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f0000457000/0x2000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00001dc000/0x1000)=nil, 0xfffffffffffffff9}, {&(0x7f0000125000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xc8}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x9}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000554000/0x3000)=nil, 0x8}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000148000/0x1000)=nil, &(0x7f00001ae000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000048d000/0x2000)=nil, 0xffd}], './file0\x00', 0xfffffffa})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
socket(0x18, 0x3, 0x50)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f00000002c0)=0xa8)
ioctl$BIOCFLUSH(r0, 0x20004268)
syz_emit_ethernet(0x1000e, &(0x7f0000000340)=ANY=[@ANYBLOB="b905f0ffffff00000000000008004500ff080000000100009078ac1400bbffffffff0f009078205c0003d50c472e5f5c2da874f82717c4f4e4368fdab78f8145a08634d9b45cad2795755e4bbed41d307dcf6e09d2b5e7ac648dea596d046769bc210ccbded81fc1c1534ef5972a8b2c1f73c487f9a86b2353c877d8793bfd9dce0955977c1f7a6f59a9ab2f9c29968aa58a213811613fca6fa719ac1992ae395455aacb7c0422ff28b606bf2aac4f452a081f9f4a11d59c9558db8457f123d1eb4f97c8280b35edcbfa7b1f19a66db1ae67806595239f8f3170e2"])
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mkdir(&(0x7f0000000440)='\x00', 0x100)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000000), 0x10)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x1, 0x100200000, 0x6, 0x17, 0xdf60, 0xfffffffffffffffe, 0x80, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x6], [0xfffffffffffffffe, 0x80000001, 0x1, 0x20000001, 0x5e, 0x7, 0x80000000000001fe, 0x0, 0x0, 0x1], [0x100000003, 0x7fff, 0x40000000, 0xffffffffffffffff, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xd, 0x8], [{0x0, 0x0, 0xfffffffe, 0x8000000000007d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x9, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9, 0x100000000000000}, {0x0, 0x100, 0x1, 0x4}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x1}}})
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x33b9)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x800, 0x4ebfac6bbaf7900)
openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCCLR(r2, 0xc0a86b02, &(0x7f0000000200)={0x0, 0x10000, 0x0})
sendmsg$unix(r1, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0)

1.382238153s ago: executing program 2 (id=2721):
socket(0x800000018, 0x3, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0)
close(0xffffffffffffffff)
socket(0x24, 0x2, 0x0)
setsockopt(0xffffffffffffffff, 0x6, 0x41, &(0x7f0000000040), 0x0)
getrusage(0x1, &(0x7f0000000000))
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e50000b9", 0x4)
r1 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd})
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1)
ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff})
writev(r1, &(0x7f0000000300)=[{&(0x7f00000007c0)='y', 0x1}], 0x1)
syz_open_pts()
writev(r1, 0x0, 0x0)
ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000780)=0x7)
ioctl$TIOCSETD(r1, 0x8004741b, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x801)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, 0x0, 0x0)

1.271743989s ago: executing program 0 (id=2724):
r0 = socket(0x2, 0x2, 0x0)
setsockopt(r0, 0x0, 0x21, &(0x7f0000000140)='!\x00\x00\x00', 0x4)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f00000000c0)=0x400, 0x4)
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/9, 0x9}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind(r0, &(0x7f0000000000), 0x10)
r1 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4)
connect$unix(r1, &(0x7f0000000000), 0x10)
write(r1, 0x0, 0x0)

1.27080517s ago: executing program 5 (id=2726):
r0 = semget$private(0x0, 0x3, 0x20)
semctl$GETNCNT(r0, 0x0, 0x3, &(0x7f0000000000)=""/4096)
semop(r0, &(0x7f0000001000)=[{0x4, 0xa8b}], 0x1)
semctl$GETALL(r0, 0x0, 0x6, 0x0)
semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000001140)=[0x101])
semctl$IPC_STAT(r0, 0x0, 0x2, 0x0)
r1 = semget$private(0x0, 0x4, 0x88)
semctl$GETNCNT(r1, 0x0, 0x3, 0x0)
semctl$GETPID(r1, 0x0, 0x4, 0x0)
semctl$GETPID(r0, 0x0, 0x4, &(0x7f0000001380)=""/88)
semctl$IPC_RMID(r0, 0x0, 0x0)
semop(r0, &(0x7f0000001400)=[{0x2, 0x0, 0x2000}], 0x1)
r2 = semget(0x3, 0x4, 0x6b0)
semop(r2, 0x0, 0x0)
semctl$GETALL(r0, 0x0, 0x6, 0x0)
semctl$GETNCNT(r0, 0x5, 0x3, 0x0)
semctl$IPC_STAT(r0, 0x0, 0x2, 0x0)
semctl$SETALL(r1, 0x0, 0x9, 0x0)
semop(r0, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
setsockopt$inet_opts(r3, 0x0, 0x1, 0x0, 0x0)
semctl$GETZCNT(r0, 0x0, 0x7, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
getpid()
semop(r1, &(0x7f00000016c0)=[{0x2, 0x1, 0x1000}, {0x1, 0xc, 0x1800}, {0x0, 0x2}, {0x1, 0x3, 0x800}, {0x2, 0x2, 0x1000}, {0x3, 0x6}], 0x6)
r4 = socket$inet6(0x18, 0x2, 0xe9)
setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000001700)=0xfffffc00, 0x4)
setsockopt(r3, 0x800, 0x7, &(0x7f0000001740), 0x0)
ioctl$BIOCGSTATS(r3, 0x4008426f, &(0x7f0000001800))

1.182041478s ago: executing program 3 (id=2727):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$BIOCGRTIMEOUT(r0, 0x4010426e, &(0x7f0000000140))
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0)
r1 = getuid()
chown(&(0x7f0000000200)='./file0\x00', r1, 0xffffffffffffffff)
setreuid(0xee00, r1)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0xfffffffe, r1, 0x0, r1, 0x0, 0x0, 0x40f}, 0x4000000000000004, 0x8000fffffffe, 0x0, 0x0, 0x0, 0x4000000002, 0x1, 0x100000000004})
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000300)=0xc)
getsockopt$sock_int(r2, 0xffff, 0x200, &(0x7f0000000200), &(0x7f0000000480)=0x4)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}})
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x1, 0x0)
close(r3)
r4 = socket(0x18, 0x2, 0x0)
setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0xf, 0x0}, 0x4)
select(0x40, &(0x7f0000000180)={0xffffffffffffffbd, 0x44809ea0, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x214, 0xb, 0x8}, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a)
r5 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg(r6, &(0x7f0000000080)={0x0}, 0x6a, 0x0)
munmap(&(0x7f0000001000/0x400000)=nil, 0x400000)
unveil(0x0, &(0x7f00000000c0)='r\x00')

1.005171986s ago: executing program 1 (id=2730):
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f0000000100), 0x0, 0x0, 0x0)

1.004971627s ago: executing program 1 (id=2731):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETA(r0, 0xc0104451, &(0x7f0000000740)={0x7, 0x408, 0x3fc, 0x2000, "0000000000fb000000000000b34445f0388a19a0", 0x33c3300a, 0x2})
semget(0x0, 0x1, 0x0)
r1 = semget(0x0, 0x1, 0x281)
syz_emit_ethernet(0x66, 0x0)
semop(r1, 0x0, 0x0)
semctl$SETALL(r1, 0x0, 0x9, 0xfffffffffffffffe)
r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)
ioctl$SPKRTUNE(r2, 0x20005302, &(0x7f0000000040)={0xa2e5, 0x401})
semop(r1, 0x0, 0x0)

1.004738925s ago: executing program 5 (id=2732):
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@random="b905f0ffffff", @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "59f976", 0x14, 0x61, 0x5, @empty, @loopback, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x7fff, 0x0, 0x3}}}}}}})

840.381191ms ago: executing program 5 (id=2734):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
mkdir(&(0x7f0000000040)='./file0\x00', 0x5c)
chdir(&(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x8)
unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00')
unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='c\x00')
setuid(0xffffffffffffffff)
unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00')

840.160515ms ago: executing program 6 (id=2735):
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x0, 0x0})
ioctl$FIONREAD(0xffffffffffffffff, 0x80206910, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x184, 0x4}, 0xfeffffffffffffff, 0x80004, 0x28c})
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {}, {}, {0x3, 0xfffffffc}, {0x0, 0x20000000}, {0x2, 0xffffffff}, {}, {}, {0x0, 0x1ff}, {0x0, 0xa}, {0x0, 0x1080}, {0x3, 0x400000}, {0x0, 0xa1f9}, {0x2, 0x3}, {0x1, 0x800}, {}, {0x0, 0x7ff}, {0x5}, {}, {0x3}, {0x3, 0x400}, {0x0, 0x3}, {0x2}, {0x0, 0xfffffffd}, {0x2}, {0x3}, {}, {0x1, 0xa}, {0x1, 0x3}]})
ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff})
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0)
ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x2})
r1 = socket(0x2, 0x1, 0x0)
socket(0x2, 0x3, 0x0)
setsockopt(0xffffffffffffffff, 0x29, 0x6c, 0x0, 0x0)
semget$private(0x0, 0x4, 0x400)
openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$FIONREAD(r2, 0xc0206923, &(0x7f00000001c0))
ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0))

839.53126ms ago: executing program 1 (id=2737):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000029, 0x37, 0x0, 0x0)

803.244974ms ago: executing program 4 (id=2738):
r0 = socket(0x2, 0x2, 0x0)
connect$unix(r0, &(0x7f0000000000), 0x10)

803.098125ms ago: executing program 1 (id=2739):
clock_getres(0x2, &(0x7f0000000000))
semget(0x0, 0x1, 0x7e7)

802.378654ms ago: executing program 6 (id=2740):
nanosleep(&(0x7f0000000280)={0x0, 0x1e49824d}, 0x0)
unveil(0x0, &(0x7f00000001c0)='x\x00')

673.839527ms ago: executing program 1 (id=2741):
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x3c, &(0x7f0000000040)="03000000", 0x4)

673.568524ms ago: executing program 4 (id=2742):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETA(r0, 0xc0104451, &(0x7f0000000740)={0xc635, 0x408, 0x3fc, 0x82000, "0000000000fb000000000000b34445f0388a19a0", 0x33c3300a, 0x2})

673.366724ms ago: executing program 1 (id=2743):
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0)
openat$wsmouse(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040), 0x0)
setsockopt(r0, 0x1000000000029, 0xa, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0)
msgrcv(r1, 0x0, 0x0, 0x1, 0x1000)
msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="010000e0"], 0x8, 0x800)
msgrcv(r1, 0x0, 0x0, 0x3, 0x800)

637.655854ms ago: executing program 5 (id=2744):
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x10, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1)
r3 = socket$inet(0x2, 0x3, 0xfc)
ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000))

519.271592ms ago: executing program 4 (id=2745):
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000640)={0x1, 0x0, 0x80000000, {[0x8000, 0x653, 0x8f6, 0x5, 0x3, 0x8, 0xffffffff, 0x8, 0x6, 0x2, 0x3, 0x3, 0x0, 0x138200000000000, 0x6, 0x7, 0x4, 0xffffffffffffffff], [0xa, 0x4, 0x3, 0x10001, 0x0, 0x7, 0x8, 0x2, 0x1, 0x7], [0x21c, 0x6, 0x868, 0xd18c, 0x9, 0x7fffffffffffffff, 0xff], [0xffffffffffffa15e, 0xe, 0x800, 0x7, 0x1, 0xffffffff], [{0xfffc, 0x80000000, 0x3, 0x7}, {0x3ff, 0x7, 0xe9c, 0xffffffffffffffb2}, {0x1, 0xd53, 0x4, 0xa}, {0xd5, 0x7, 0x100, 0xc}, {0x9, 0xfffffff7, 0x6, 0xf9df}, {0x81, 0x10001, 0x2, 0x3}, {0xfff, 0x4, 0x4b3, 0x10000}, {0x4, 0x2, 0x6, 0xc}], {0x8, 0x0, 0x0, 0x9}, {0x1, 0x8, 0x3, 0x8000}}})

519.01139ms ago: executing program 6 (id=2746):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x6, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x800, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x82, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x4, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]})
r0 = open(&(0x7f0000000500)='./file0\x00', 0x8000, 0x10e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x7ebd, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
r1 = socket(0x2, 0x4001, 0x0)
r2 = dup(r1)
r3 = fcntl$dupfd(r1, 0x2, r1)
dup2(r1, r3)
listen(r2, 0xb)
setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000001080)=0x7fff, 0x4)

518.909538ms ago: executing program 4 (id=2747):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0)
ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f0000002900)=0x1ff)

518.368394ms ago: executing program 3 (id=2748):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0x3d, &(0x7f0000000040), 0x0)

481.369348ms ago: executing program 0 (id=2749):
r0 = semget(0x0, 0x1, 0x281)
semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000080))

302.384439ms ago: executing program 2 (id=2750):
r0 = socket(0x2, 0x3, 0x0)
close(r0)
r1 = socket(0x2, 0x3, 0x0)
close(r1)
socket(0x18, 0x2, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7})
r2 = socket(0x18, 0x3, 0x0)
connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4)
setitimer(0x2, &(0x7f00000000c0)={{0xffffffff}, {0x277a, 0x3}}, &(0x7f0000000100))
write(r0, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c)

300.647776ms ago: executing program 5 (id=2751):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
ioctl$BIOCPROMISC(r0, 0x20004269)
ioctl$BIOCPROMISC(0xffffffffffffffff, 0x20004269)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0)
syz_emit_ethernet(0x3b, &(0x7f00000001c0)={@broadcast, @remote, [], {@arp={0x8864, @generic={0x18, 0x804, 0x6, 0x9, 0x1, @broadcast, "45f5bef26a3e60e5c5", @empty, "61892e0aa70cf1c98363a60a056cd7c1"}}}})
ioctl$BIOCSETIF(r1, 0x8020426c, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100))
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0)

299.577531ms ago: executing program 3 (id=2752):
socket$inet(0x2, 0x1, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0}, 0xee1918aaadf8bcd6)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080))
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8, 0x8, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x7fff, 0x80000201}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x2}, {0x7, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x800, 0xffbf, 0x80cf}, {0x1, 0x5, 0x85, 0x2}, {0x0, 0x1, 0xfffffff8, 0xfbffe2e9}, {0x8, 0x4000ffe, 0x6, 0x17fff}, {0x7, 0x0, 0x5, 0x7}, {0x8, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10b, 0x10001, 0x9}, {0x7, 0xee2, 0x4, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x7fff}, {0xffffffff, 0x8003, 0x6, 0x69}]})
r0 = syz_open_pts()
close(r0)
setrlimit(0x8, &(0x7f0000000040)={0x9, 0x2000004d})
r1 = syz_open_pts()
close(r1)
syz_open_pts()
writev(r1, &(0x7f0000001480), 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$VNDIOCGET(r2, 0x20006473, 0x0)
ioctl$FIOASYNC(r0, 0x80047470, 0x0)
writev(r0, 0x0, 0x0)
poll(&(0x7f0000000000), 0x35, 0x0)
r3 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0)
pwritev(r3, &(0x7f00000013c0)=[{0x0}, {0x0}], 0x2, 0x7fff)
setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1ff})
sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="5318", 0x2)
r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
semget(0x0, 0x4, 0x20)
sysctl$net_inet_divert(&(0x7f0000000240)={0x4, 0x24, 0x2, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0)
ioctl$BIOCLOCK(r4, 0x20004276)

205.299165ms ago: executing program 0 (id=2753):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r0, &(0x7f0000001580)=[{&(0x7f0000000080)="6e0b3a913e", 0x5}], 0x1)

204.36639ms ago: executing program 6 (id=2754):
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$VMM_IOC_RESETCPU(r0, 0xc0205609, &(0x7f00000004c0)={0x2, 0x0, {[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x1], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x400], [0x10000, 0x4000000000000000, 0x3], [{0x0, 0x3, 0x0, 0xfffffffffffffffd}, {}, {0x1, 0x10000000, 0x0, 0x74}, {}, {0x3, 0x0, 0x4}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x8}], {}, {0xfffd, 0x0, 0x1}}})

41.218213ms ago: executing program 4 (id=2755):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x24, &(0x7f0000000040), 0x5)

41.021901ms ago: executing program 6 (id=2756):
r0 = socket(0x18, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1005, &(0x7f0000000080)=0x87, 0x4)

40.861667ms ago: executing program 4 (id=2757):
r0 = open(0x0, 0x1, 0x4c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg(r0, &(0x7f0000000c00)={&(0x7f0000000280)=@in={0x2, 0x2}, 0xc, &(0x7f0000000640)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)}, {&(0x7f0000000440)="c357904df29f644712afaefd5e8ec5", 0xf}, {0x0}, {0x0}, {0x0}], 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x2d8}, 0x8)
ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f0000000080)={0xfffffffffffffffb, 0x4})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @rand_addr=0xfffffffa}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x62, 0x0, @loopback, @multicast1}}}}}})
socket(0x18, 0x3, 0x0)
ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000006c0)={0x2, 0x0, {[0xcd04, 0x1, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0xdf5a, 0x0, 0x5, 0x2eff, 0x5, 0x3, 0x6, 0xffffffffffffffdf, 0x8000000, 0xa8, 0x2, 0xce7], [0xfffffffffffffffe, 0x1, 0xfffffffffffffffb, 0x8000ffffffff, 0x2, 0x7b99, 0x5, 0xb, 0x1], [0x100000001, 0x2, 0x40000000, 0x8, 0xffffffffffffffff, 0x11003, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x2, 0x3, 0x0, 0x7d06}, {0xfffc, 0x7, 0x4, 0x2}, {0x10, 0x80001, 0x5bec, 0x814}, {0x3, 0x5, 0x7, 0x80000001}, {0xc, 0x6, 0x0, 0x808}, {0x400b, 0x2000, 0x40000, 0x4000000007}, {0x7fff, 0x20000, 0x4, 0x8}, {0x5d74, 0x0, 0x1, 0x4}], {0x2000, 0x4, 0x10000, 0x4}, {0x0, 0x8, 0x3, 0x9}}})
r1 = socket(0x18, 0x1, 0x0)
listen(r1, 0x0)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
ioctl$VNDIOCSET(r2, 0x84946467, &(0x7f0000000000)={0x0, 0x81, 0x0})

40.333825ms ago: executing program 5 (id=2758):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfe, 0x80000001, 0xc, 0x3, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x85, 0x7, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x8, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x2, 0x27f3, 0x3, 0x99}, {0xce3, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0xc, 0x7}, {0x2, 0x82, 0x5, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e7, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0xa47}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0xc1, 0x1, 0x1002, 0x30004}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x80008001, 0x10001, 0x10, [{0x0, 0x7, 0x7, 0x71000}, {0x6, 0x8, 0x8, 0xfffffff9}, {0x0, 0xf86, 0x0, 0x9}, {0x6, 0x400, 0x7, 0x3}, {0x401, 0x726, 0xe, 0x7}, {0x2, 0x6, 0x3, 0x91099}, {0xcdf, 0xfffffffd, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0xa, 0x10001, 0xc, 0x3}, {0x0, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x8, 0x6}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0x4, 0x7, 0x6}, {0x200, 0x1, 0x4, 0x30004}]})
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x1, 0xa6, 0xe, 0x7}]})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0})
close(r0)

877.266µs ago: executing program 6 (id=2759):
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x5e07963dbfff, 0x2)

0s ago: executing program 2 (id=2760):
r0 = syz_open_pts()
ioctl$TIOCSTAT(r0, 0x20007465, 0x0)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x8)
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000100)=0x8)
pwritev(r0, 0x0, 0x0, 0x2)
r1 = syz_open_pts()
fcntl$lock(r1, 0x9, 0x0)
flock(r1, 0x1)
flock(r1, 0x2)
syz_open_pts()
socket(0x18, 0x4000, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts.
pckbd_enable: command error
denied attempt to set clock forward to 35184372088896
load: 1.01 not a controlling terminal
6-#2%!4%: 56--!0 &!),%$: 12
‡]C™â$ÿ,s}×						
	



	
	

	
		malloc(): allocation too large, type = 127, size = 6535087492
vm_create: uvm_map failed: 12
pmap_unwire: wiring for pmap 0xfffffd807070ba30 va 0x200000001000 didn't change!
lo0: can't handle af0
pckbd_enable: command error
uvn_flush: obj=0xfffffd806dbf4e20, offset=0x0.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
pppx: unable to set addresses for pppx1, error=17
pppx: unable to set addresses for pppx1, error=17
WARNING: thread `nfsio' (31341) exits with status -1
WARNING: thread `nfsio' (336393) exits with status -1
WARNING: thread `nfsio' (102263) exits with status -1
WARNING: thread `nfsio' (241713) exits with status -1
uvm_fault(0xffffffff838b92d0, 0xffff800028815040, 0, 2) -> d
kernel: page fault trap, code=2
Stopped at      memset+0x52:    repe stosq      %es:(%rdi)
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
memset() at memset+0x52
ffs_write(ffff80002f0f1130) at ffs_write+0xb9a
VOP_WRITE(fffffd806aec57b0,ffff80002f0f11c8,23,fffffd8007bfd2d8) at VOP_WRITE+0x101
vn_rdwr(1,fffffd806aec57b0,ffff80002f0f1300,40,0,1,add47543b544c4c6,0,1008,0) at vn_rdwr+0x12d
acct_process(ffff800034104fb0) at acct_process+0x7a2
exit1(ffff800034104fb0,0,0,1) at exit1+0x5c4
sys_exit(ffff800034104fb0,ffff80002f0f1530,ffff80002f0f1480) at sys_exit+0x1a
syscall(ffff80002f0f1530) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f517c6e1ef0, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.