last executing test programs: 2.686642981s ago: executing program 5 (id=1517): setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x2fffc, 0x4b6b, 0xfff6, 0x21d0b78c, "2707a460990d000009000000fff7ff00", 0x99, 0x869}) writev(r0, &(0x7f0000001900)=[{&(0x7f0000000900)="9681f7743ea6293f90cbdc967943d2f5c46fafcbd6ce32330bedbcfa5ee5b7cd82a8452ec42238fcee93a71d790531878e7699a04b06ca1cad9f294aca1953833fb97102addd94434f562a472bfc6b52607e37a093563a607c8c551396715906be5feed932669640cdd7718d85e0139174fd497e75657405800944d531be9225266ef15e73d65fd16bc80988adbf5f48f01f4bafb7c3ae4df8fc11fc89f27d14e92172352dc9ec2c1576ad1cc6458991b73419f6b95a2d8d27963e4962189503f5a2b7ecfc26b8f7b7d9ba18aff8e237142a82c1fa4662a38bf0bd1932b8f257f5106dfeda8fdd404a165df39da8fab9dc1b92ee289c176190b5bd0b343e6a3c5f0279c62a50332c20b09040af2f5fdc1699eebc5bd118887642d9ea6097e070742b7c07b6d89454a42baa678351914d7c8514d36b468b8de5c762fa1c9177eb7e37d2e42becf9780a62e71af8373978eaac771a139c5a82c84fb2f45a1d536ead8a7e4bcce6f9c568250ce35b45c6e355c141c945de5ddb6fc3b22702bbf72c4e5efcdfcf3d6743d716337b37df90e5791498cf20d1a296c7c37452147aa16cc7ffabb88b7a317ea4949567b77484dfdbd69b80b73e1e9221cf1c9f29279b4f4f087b92eea5a3a30f2f7f257908c32ccf37deb56d7f8819228a537c3d18a49aa4835e425b5a61f4ee3ff2346f07908efd9f36b395294a08116540aa87d72ff250f6e60b29107022814426f65461e1d7174252ad8d374dcf1a8727d7cf4b110a743152c1e01aea058ac789ca6f6d8e109750c55d5d1151cfcd2873ea26e70886b86eafde44fa8e9ff0ab8bfffa94d6ce9a499785254c78220da86f92894b5fd0f9e221b5c03cdceb4da5e62c382d1317de5d56551aff1905b3241f6bc81312498c9bef06eb7eda4c6f16e12c2d334286a3e8fe48e5995a14e30160fd958b63cf9eea1645adb514f1edf20aa04e7fcd02ebfea03e0fc5daae0af9a82bd9107b423ec9b0cde64e7eec6a925da1803db9104c9986f0f763aa24ac5404b1e30b2ee99ac195528bcc50f3e22c13013c9d6094b9ef3316060aa759f0003c7b27ed1b7ab06fd4637c8155607fbf8106f01068e6276aeda066579d98b8c08e880ee964d679ce2f4fd4452f05a8d5a0d6cfb1822534f6f34d0743bd75f547e1bb8361c48320054fa0ec3b529ce52b1b119321a0e4a14b5dd87a5b5c1f54aeb7c03e65d035d11410c2d5587999d29ee81fc1e827756ae89f7d87d9c5522e279047c3189d87435b640d2dae53be305d8ca2bc5a608fcfa06f5a4c770bc014d110fdbda41fc0be75cc2934df126476ca1b5935cf034e7c15052ae20837dd419fe765bda1ee7b8d694a6c24088b43d317dc0470a0f3d1038092f6ab4429edb01cba5f5d7769076e4878562e5fa6823adfd03c9173f0a7fd3290b6232d6317b7567e277bdd0a289465a8be9137884cee8668f3f0acccf6514bf08ba19b1477309c5eaa2d8b5fb8efa2fcdb450afaadc738e50791d215340e57839cce5c5e5190fc51deef734b26a993394fa76838acb5e87c51c313f0c12257b8e4c93743640126d6a2e8c214f0da875786e9eb7ddd637aa50b221f3de77723c29dfa23289321fa75b76ad2f39ca7bca9809771de4f1ab8f1ffb4512935d809", 0x492}], 0x1) closefrom(r0) 2.445465402s ago: executing program 5 (id=1531): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x7e, 0x3, 0x48}, {0x6, 0x80, 0x6, 0xfffff805}]}) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="a7a6d61de4a1090992003b47915d7556c41fe59302e05da9bf2f02441efab93e1f0b83d722018f7ef5bd2520e43a5853732ffa5054a2eed7891118a393f7c83d5a09d0515e", &(0x7f0000000000)=0x45, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 2.34885975s ago: executing program 5 (id=1536): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x2}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r1, 0x80047476, &(0x7f00000000c0)=0x1300) 2.239719088s ago: executing program 5 (id=1550): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) r2 = fcntl$getown(r1, 0x5) fcntl$setown(r0, 0x6, r2) fcntl$setown(r0, 0x6, r2) 2.238723106s ago: executing program 5 (id=1553): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000)=[{{}, 0x3, 0x0, 0x1, 0x2e80100, 0x2}, {{}, 0xffffffffffffffff, 0xc0, 0x8, 0x94b, 0x2}, {{}, 0xfffffffffffffff8, 0x90, 0x20000000, 0xfc, 0x7fffffffffffffff}, {{}, 0xfffffffffffffff8, 0xc, 0x0, 0x6, 0x1000002}], 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000140)={0x5, 0x100, 0x4, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) 2.132096883s ago: executing program 5 (id=1557): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) write(r0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x25) execve(0x0, 0x0, 0x0) 1.664563871s ago: executing program 0 (id=1595): open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x80) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x0, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x2}, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffe30) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) 1.664170664s ago: executing program 0 (id=1597): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x140) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ftruncate(r0, 0x8) ktrace(&(0x7f00000000c0)='./file0\x00', 0x1, 0x2, 0x0) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 987.739812ms ago: executing program 6 (id=1648): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 973.817377ms ago: executing program 6 (id=1651): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x186) setrlimit(0x1, &(0x7f0000000240)={0x2, 0x1fd}) setgroups(0x0, 0x0) r0 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xee01) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20c1, &(0x7f0000000180)={0x3, 0x5}) 828.99942ms ago: executing program 6 (id=1655): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x800c1, 0xd, 0x1, 0x1040807, 0xfffeffff, 0xffffffff, 0x0, 0xea58a3795ec839c9, 0x8, 0x8000000000f6}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x80000000000000, 0x100800000000009}, {0xffffffffffffffc0, 0x8}}, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 821.415781ms ago: executing program 4 (id=1656): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x9a92, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x42b788, 0xffffffff, 0x7, 0x86a19c, "bb080006020900d91050080000000f0000004000", 0x5, 0x1383}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) 723.575634ms ago: executing program 7 (id=1660): sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x6, 0x101, 0x1, 0x6, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0xffffffff, 0x1, 0xf, 0x7}, {0x140004, 0x4, 0x401fc000, 0x3}, {0x3, 0x10, 0x67093b58, 0xfff}, {0x4, 0x2, 0xe, 0x4}, {0x2, 0x20047ffd, 0x7d457398, 0xff}, {0x5, 0xbffffff5, 0x4, 0x6}, {0x99d, 0x8, 0x3, 0x4}, {0x5c, 0x44c7, 0xbfa9, 0x8003}, {0x6, 0x0, 0x10001, 0x20000001}, {0x7, 0x1, 0x488, 0xe1}, {0x8000, 0x9, 0x61b866c7, 0x8}, {0x5, 0xa, 0x5, 0x3ff}, {0xfffffffe, 0x6, 0x8, 0xfffffff8}, {0x2, 0x5, 0x80, 0x2000e}, {0x3ff, 0xf3, 0xd, 0x4}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) setitimer(0x1, &(0x7f0000000140)={{0xcdc, 0x3}, {0x80, 0x11}}, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 657.265768ms ago: executing program 0 (id=1661): mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6381) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7960) mknod(&(0x7f0000000100)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) pwrite(r0, 0x0, 0x0, 0xd) 656.975196ms ago: executing program 6 (id=1662): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x7ec}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000180)) 656.450314ms ago: executing program 1 (id=1663): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xfffffff7, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x3, 0x10, [{0x3, 0x9, 0x3, 0x70ffc}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x807, 0x8007}, {0x401, 0x200726, 0x2800, 0xfffffffe}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6f}, {0x4, 0x304, 0x54, 0x8}, {0x2, 0x7, 0x7, 0x20000007}, {0x4, 0x8001, 0x593e, 0x100}, {0x1cf, 0x0, 0xc, 0x3}, {0x7, 0x9, 0xfffffffd, 0x9}, {0xab, 0x0, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x4, 0x101002, 0x30001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) open(&(0x7f0000000080)='./file0\x00', 0x8, 0xa2) 656.128166ms ago: executing program 3 (id=1664): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000001540)={0x40000000000000cd}) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x300000003}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000200000003e0004", 0xd, 0x40a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 655.79785ms ago: executing program 3 (id=1665): mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x712, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x3, 0xffffffffffffffff], [], [], [0x0, 0x0, 0xffffffffffffffff], [{}, {}, {0x0, 0x0, 0x0, 0x800000000000}]}}) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) kevent(r0, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) 635.744866ms ago: executing program 1 (id=1666): write(0xffffffffffffffff, &(0x7f0000000900)="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", 0x15b) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x5f0, 0xee6b, 0x1, 0x160350d, "cc1408002100ca9ec0a274bf75275a0d1ec11000", 0xa00401, 0x6}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 503.292515ms ago: executing program 4 (id=1668): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="890704", 0x3) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, 0x0, 0x0) 502.854353ms ago: executing program 2 (id=1669): kqueue1(0x10000) syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x40, 0x100, {[0xfffffbfffffffff9, 0x0, 0x2, 0xc, 0x6, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x8, 0x4, 0x2, 0x100], [0x5306, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe, 0xffffffffffffffff, 0x0, 0x9467], [0x2, 0x0, 0x0, 0x5, 0xb, 0x11000, 0xffffffff00000000], [0x100, 0xffd6, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe], [{0x1000, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x3, 0xfffffffe, 0xad}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0x0, 0x2, 0x8, 0xfffffffffffffffb}, {0x0, 0x28291c58, 0x9, 0x2000000000000004}, {}, {0xfffc, 0x100, 0x0, 0x8}], {0x9, 0x5, 0x800}, {0xfffe, 0x80000000, 0x8, 0x4}}}) r0 = kqueue() kevent(r0, &(0x7f0000000240), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000580)={0x2, 0x100, 0x4, 0x10000, "000800000a00000f000000aff0338a6b4fc6d780", 0x4, 0x7}) 502.512379ms ago: executing program 2 (id=1670): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000001c0)={0x2df57367, 0xffffc765, 0xd, 0xfdff7dfc, "0a6400b70700605c9b0051696203000000020400", 0x4, 0x10003ff}) writev(r0, &(0x7f0000002bc0)=[{&(0x7f0000001340)="b3ecd12f63dad4cc704df457ac91f9a1e28fb31d097469f9bf4c", 0x1a}, {&(0x7f0000000080)="57161c3306d10500ffffffffdb7b4b2d4f757fcfd5b4e38c0d29976a35", 0x1d}, {&(0x7f0000000200)="3cb785414b4a71f5a5f255b56fa651ab79fbe0da1da18a94723b11aebf5a7330a6fe338084ec24bd4de7f50aee734708f86bfcc8a334834758d7a94605a1", 0x3e}, {&(0x7f0000001380)="2dac6fa25844d72b2cf0f6d262d618e7d054449c48b3077c73c4e1b4316878b97fdcfabd61fd6c4797f5511899891892e1af3204bb5cd2862465994e363d99a0eaa6cd80b2d6e54def63b02ccd58d3a50c9b75d4a12aec441c548980ad39a33f71fb3fab000d28f74cd75ed6b2544e80e66a7d094b2164433bf7781dfeff80ae1d29125f31ba92486007046e7555209091e7c6862fde5993718bd9d2fc6f5ef9b2e99677437ab15f05dce50963ab942c83dd30985daaf52e6a0e7569dca8e2fd2bf62d47dc4c01ce2a48c2e3ad5ca91820219c77ef6b5586717ef8c7a6dbd364334093e8639aabbb85f094b59c0f9c966cfe5812f5f02e2040020453e83c442e5ef8aa0d34210c11f461b3aba301ff808ef04fc40d649dde1580f74697d4e06e8d90c25a1bfef714678467bb669295cc729b8757a02adffa2d854b3c18c009f3cef54dee9b39f74626127dcc078bfb480ebec6339386dca954c536c8e54219eb799f8e71598e70c9eabbe6a71cbfd87c229023b15c530885c592ddce5ea576ef1b53c1a38c76bd52c34e8604e053195fe5f5e9cc7802a72897d16ae63a17260696028a026557b31553e5f9f18c41acaa3bd7b90106f3926be36784358482f3ab48b60d27dfdc067133a4eaf7b509f85779facce17c6aa0a1c4bcca1429d0d9e6cfa662e8c26160fb78c633686ef7864c5f141ab08aed2f1df7969f53100f3f42949f7eddfe1aad7b07360df3c630443c9a5ac04e42b86964e89da8b84d00dae1828a5fce0cc165fed3c19b8a088262c734954b9ccf81e2049727306409a29e5c56a00f84d14ee1ca8480f655f37d2e4bcc8ce9aa8af9e1b2e3b27c3e1b5b4029f57e611e776ab2099a4b98989efe2aea3fbe3bd724600ae38ecc701710947857581c4d84afc89a9f7b16ab76577637579e4d587d005efd353d5d9dbd417af40405b2769ca35e4f968b48fe373e0dbc33a20cd62c2d529bcf69dc66a62a2f811ea57b83ba0f2eeadf43413e368ad302d915c6bf5948431f4269acc2e8f735b816818b5afd9c0fb300a8c82a3f6949606bce962c91c61bf5d28651992fd7ccf13835f58b5e2b3c4d34fadca002fea53bc21fc437db87f448178a7da0e99ba82d6f33c8a19c9a438793adab815514f619fb021f024f396247d67dcb894165dce69507c87dae377a3d67f52bddcd73a5380a5aaeb20474006e21cc88d3df9237ac8c43779a1ecc960ad514965e20401bdbcf1944436e831549c78991912f6d7f6cb77a021957d51b747168f587d6a9a561ebf2e073edaf8ec3c724c753c436616a064deb3cf4b6f8a52347ba2aa4483dc303c2cbe509227f08a45bc211e37a58f936d2307d2fba9d1c858b5084826503aba3aec92cdf0d17b4af7121109cdc00c21e2dd7694bcf0695e290f0b0a33c10959d0b6a58d3ff43374ad113ae65569050f66e599991e8793148b88042257183772c10eff79151bda8319c7e122584f15084792ceb17b88e667cbc747555f39400a76affa91e073ae54b5077bfab25eedde9a16508c4b19a5dbf9db033f739ec2946a92279089c669734fd947eeedcb3e8cdaad88cb11e227c7657d97b9a0fd67446e603c5dcd735faf373bc4eab201bfd5e597913502fe8141c88241b9ab2cf46a14dc69ee8d8b7200c98995990784701b88b0164453c905847481b1c464164ac36923796c6ee97aa88d6c4f945ff8966b88224ea5d73d488a2eff45bafe1a44238f40d08a190c480aa52fb679417de5a04c0fb4edca7", 0x4e5}], 0x4) 499.941485ms ago: executing program 3 (id=1671): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xfffffff7, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x5, 0x10, [{0x3, 0x9, 0x4, 0x70ffc}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xfff, 0x0, 0x9}, {0x1, 0x807, 0x8007}, {0x401, 0x200726, 0x2800, 0x1}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x304, 0x54, 0x8}, {0x2, 0x7, 0x5, 0x20000009}, {0x4, 0x8001, 0x593e, 0x100}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7, 0x9, 0xfffffffd, 0x9}, {0xab, 0x0, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x4, 0x101002, 0x30001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) msgget$private(0x0, 0x0) 499.625531ms ago: executing program 7 (id=1672): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x6, 0x7, 0x7}, {0x24, 0xf0, 0xff}, {0x6, 0x5, 0xb6, 0xf}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="a7a6d61de4a1090992003b47915d8156c41fe591026c9e82b38988f5b063c973f06ac0153544e933", &(0x7f0000000000)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 498.065312ms ago: executing program 6 (id=1673): mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000240)='./file0\x00', 0x800, 0x1f2ee1f15fe0ed07) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7, 0x17, 0x0, 0xfd6, 0x8, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x3, 0x4, 0xa24}, {0x0, 0xb, 0x8, 0x8}, {0x800008, 0x20f09, 0x200, 0x9}, {0x7ffffffe, 0x3, 0x9c, 0x1}, {0xc, 0x7ff, 0x5, 0x4d8a}, {0x3, 0x2, 0x3, 0x2}, {0xbca9, 0xd17e, 0x81ec, 0x2d}, {0x2, 0x836, 0x17, 0x6}, {0x2, 0x87e, 0x3e7, 0x9}, {0x1000004, 0x90, 0xd1b, 0x88}, {0x1c4, 0x5, 0x4, 0x412c8391}, {0x3, 0x6, 0x20003, 0xfc0b}, {0xc, 0x4, 0x0, 0x2}, {0x29a71720, 0x0, 0x2, 0x400004}, {0x802, 0x7, 0x7df, 0x100}, {0x7, 0x8, 0x1002, 0xc}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x7, 0x31, 0x7fffffff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x8, 0x0}) 416.443352ms ago: executing program 7 (id=1674): openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x7ec}) r0 = syz_open_pts() close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_pts() writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 415.879199ms ago: executing program 4 (id=1675): ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, 0x0) r0 = socket(0x18, 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000040)={&(0x7f00000001c0)=[{0x8c, 0x7}, {0x8e, 0xca52}, {0x84, 0x1007}], 0x3}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8020699d, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r1, 0x8020699f, &(0x7f00000001c0)) 415.513733ms ago: executing program 7 (id=1676): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="91288156c41fe591026c9e82b38988f5b0631eaa1f298a490ade00e2e95cd2e14e7ea7a8", &(0x7f0000000000)=0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) 415.198751ms ago: executing program 4 (id=1677): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xe2) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x7, 0x1, 0x71002}, {0x3, 0xe, 0x8, 0xfffffff9}, {0x80000101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0x8ce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x5, 0x14, 0x5910}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1d0, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0x9, 0x60, 0x7}, {0x6, 0xfffffffa, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x230003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) socket(0x1e, 0x3, 0x0) 394.559916ms ago: executing program 7 (id=1678): setrlimit(0x8, &(0x7f0000000440)={0x45, 0x56}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) read(r0, &(0x7f0000000040)=""/86, 0x56) ioctl$TIOCSTAT(r1, 0x20007465) 377.988931ms ago: executing program 1 (id=1679): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) connect$unix(r0, &(0x7f0000000040)=@file={0x7, 0x1, './file0\x00'}, 0xa) 357.137141ms ago: executing program 1 (id=1680): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) socket$inet(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, &(0x7f0000000480)={0x7fffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 356.71445ms ago: executing program 3 (id=1681): open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) sendmmsg(r1, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) 268.767867ms ago: executing program 6 (id=1682): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) execve(0x0, 0x0, 0x0) 202.719809ms ago: executing program 0 (id=1683): r0 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "0000000000000000210000000000ebff", 0x26eb}, 0x1c) r1 = socket$inet6(0x18, 0x1, 0x6) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0xa, "000400", 0xaa}, 0x1c) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000010000000600", 0x7}, 0x1c) 187.429718ms ago: executing program 2 (id=1684): r0 = socket(0x18, 0x3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0x100b7fe, 0x800002, 0x7}, {0x100006, 0x3, 0x8, 0x2}, {0x2, 0x0, 0x200, 0xfffffffe}, {0x4, 0x6, 0x80000001, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x9}, {0x4, 0x7, 0x34}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0xa44f, 0xfffc, 0x6, 0xe1}, {0xcb, 0x2, 0x8, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x10008, 0xe2, 0x7, 0xfffffff8}, {0x5, 0x5, 0x24, 0x4}, {0x81, 0xd654, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406}, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 184.094653ms ago: executing program 3 (id=1685): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x2) read(r0, &(0x7f0000000040)=""/1, 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0xffffff1c, 0x1, 0x80000001, 0x2, "062af2596ce602482a70881c95e38efb84885efd", 0x80000001, 0x8}) 179.149114ms ago: executing program 4 (id=1686): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x7e, 0x3, 0xba0}, {0x48, 0xa, 0xff}, {0x6, 0x80, 0x6, 0xfffff802}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) 168.891261ms ago: executing program 0 (id=1687): sendmmsg(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x6, "450a93157bdc3752559c60a171000b1b", 0x5}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) 157.046581ms ago: executing program 2 (id=1688): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0xffffffff7fffffff}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00000e7000/0x3000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7fd}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f0000701000/0x3000)=nil, &(0x7f0000673000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000123000/0x3000)=nil, &(0x7f0000369000/0x3000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0xa8}, {&(0x7f000015d000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffdffffffffff8}, {&(0x7f0000483000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0xe}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fc}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x8}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf24c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) 146.546904ms ago: executing program 4 (id=1689): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000040)={0x10, 0x5, [{&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, 0x2}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x688c80000000000}, {&(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x9}, {&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x5}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xb4b1}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0xffffffff00000000}, {&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0xeee}, {&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x60}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x4}, {&(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x2dba}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x4}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x8000}, {&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x100000001}], './file0\x00', 0xcee, 0x6, 0xd, 0x1, [0x2, 0x10000, 0x7, 0xe, 0x6, 0x7fff, 0x3, 0x47, 0x8, 0x9, 0x7, 0x8, 0x1, 0x29, 0x5, 0x6, 0x5, 0x2b5, 0x7, 0x9, 0x1e0, 0x3, 0x5457, 0x7fff, 0x8, 0xb, 0xe, 0xdc, 0x7fffffff, 0x400, 0x2, 0x4, 0x7, 0x764b6cb8, 0x4, 0x4, 0x10, 0x8, 0xa1, 0x9, 0xf, 0x3, 0x1ff, 0x7, 0x0, 0x3b6, 0xf, 0xe58, 0x9, 0xfffffffe, 0x7, 0x1ff, 0x2, 0x81e4, 0x7, 0xe3a, 0xb4, 0x2, 0x5, 0x6, 0x5, 0xfffffffe, 0x5, 0x100, 0x800, 0x6, 0x7, 0x1, 0x10, 0x5, 0x3, 0x2, 0x1, 0x8, 0x0, 0x6, 0x8774, 0x1, 0x40, 0x169, 0x2, 0xfffffff7, 0x0, 0x4, 0x0, 0xdc6, 0xfff, 0x7f, 0x401, 0x80000000, 0x9, 0x2, 0x8, 0x80000000, 0x7, 0x7, 0xd3, 0x1, 0xb5c, 0x412, 0x572, 0x8, 0xf29, 0x2, 0x8, 0x5, 0xffffffff, 0x9, 0x8, 0x4ed4bbae, 0x8678, 0x7fffffff, 0x842, 0x8, 0xd150, 0x7ff, 0x7, 0x6505, 0x80000001, 0x8, 0x8, 0x9, 0x6, 0x3, 0x4e95, 0x9, 0x9, 0xffff, 0x9, 0x9, 0xcf66, 0x2, 0xd3, 0x3, 0x2, 0x8, 0x3, 0x848, 0x8000, 0x1e3c, 0x2, 0x3, 0x4, 0xff, 0x0, 0x101, 0x1, 0x3, 0x7, 0x3, 0x7ff, 0x0, 0x5, 0x9, 0x2, 0xad8a, 0x6, 0x5, 0xcb, 0x4, 0x0, 0x4, 0x7fffffff, 0x0, 0x39257ca2, 0x40, 0x67, 0x1, 0x4, 0x9, 0x567, 0x1, 0x4, 0xffff, 0x8000, 0x8, 0x8000, 0xff, 0xfff, 0x7, 0xfffffffb, 0x64, 0xff, 0x0, 0x3f, 0x294, 0x6, 0x4512, 0x7, 0xffffffff, 0xca56, 0x3, 0xf, 0xff, 0x81, 0xea09, 0x80000001, 0x9, 0x7, 0x7f, 0xfffffff7, 0x0, 0x1, 0x5, 0x6, 0xffffffcb, 0x4, 0x1, 0x5b, 0x7, 0x80000001, 0x0, 0x4, 0x7fff, 0x3e851730, 0xa, 0x100, 0xdf6, 0xc8, 0x4, 0x80000001, 0x7, 0xfff, 0x2, 0x2c, 0x3ff, 0x81, 0x6, 0x100, 0x544, 0x6, 0xe, 0x8, 0x8, 0x8f, 0xffff, 0xb492, 0x9, 0x8008, 0x7d, 0x5, 0x5, 0x6, 0x7, 0x28a4, 0x2, 0xfffffff0, 0x0, 0x2, 0x0, 0xf, 0xa, 0x2, 0x6, 0x2, 0x8, 0x7, 0x9, 0x8, 0xa, 0x7, 0x6, 0xbde, 0xff, 0x7, 0x4470, 0x2, 0x8, 0x8, 0x0, 0xe161, 0x918, 0x10, 0xde, 0x80000000, 0x8, 0x3, 0x9, 0x400, 0x6, 0x200, 0x6, 0x0, 0x1, 0x6, 0x9, 0x5, 0x0, 0x1, 0x6, 0x7, 0x0, 0x2, 0x40, 0x6e8, 0x1, 0x400, 0x7, 0x4d5755c0, 0x80000000, 0x5, 0xe, 0x80000001, 0x3, 0x1, 0x9, 0xc, 0x5, 0x5, 0xfffffff7, 0x14f5, 0x4, 0xfea8, 0x4, 0x1, 0x200, 0x4, 0xc, 0x3, 0x4, 0x8, 0xfffffffb, 0x0, 0x2, 0xfffffe00, 0xad4f, 0x10001, 0x9, 0xfffffff8, 0x5, 0x10, 0xe, 0x7, 0x88c, 0x6, 0x9, 0x6, 0x6, 0x7, 0x0, 0x432, 0x0, 0x3, 0x9334, 0x40, 0x3, 0x5, 0x8, 0x2, 0xc, 0x5, 0x401, 0x5, 0x7fffffff, 0x6, 0x44, 0x1ff, 0x9c1a, 0x0, 0xfffffffa, 0x1, 0x0, 0x1, 0xfffffffe, 0x9, 0x1, 0x7, 0x0, 0x5, 0x8000, 0x4, 0xd5, 0xdd, 0x5, 0xfffffff8, 0x2400000, 0xdc, 0x8, 0x3, 0xffff8001, 0x7, 0x1, 0x0, 0x0, 0x6, 0xfffffff7, 0x9, 0xa3, 0x8, 0x4, 0xffffffff, 0x2, 0x6, 0x4, 0x3, 0x2, 0x5, 0xffff7fff, 0xa, 0x15, 0x10001, 0x7, 0xfffff1ec, 0xaf6, 0x1aa, 0x80, 0x1, 0x1b, 0x0, 0xfff, 0x0, 0x2, 0xfff, 0x80000001, 0x8, 0x1ff, 0x7ff, 0x1000, 0x7fffffff, 0x5, 0x3ff, 0x42e0da50, 0x0, 0x7d, 0x7, 0x80, 0x4, 0x1, 0x0, 0xb07, 0x4, 0x9, 0x1, 0x400, 0x6, 0x2, 0x180000, 0x3, 0xb0cc, 0x1, 0xfa2, 0xab6e, 0x4, 0x7, 0x1, 0x5, 0x3, 0xc, 0x5, 0x10001, 0x4, 0x9, 0x1000, 0x3, 0x8, 0x4, 0x1, 0x46, 0x5908, 0x0, 0x817, 0x8, 0x81, 0xe, 0x1b9c, 0x1, 0x800ec2a, 0x7d6, 0x4, 0x3, 0x7f, 0x4, 0x1b7, 0x2, 0x6, 0x4, 0x6, 0x8, 0x100, 0xfffffff8, 0x3000000, 0x9, 0x9, 0x2, 0x5, 0x8, 0x5d9, 0x2, 0x9, 0x1, 0xa, 0x5, 0xffffffff, 0x5, 0x10, 0x0, 0x45c, 0x7, 0x400, 0x5, 0x5, 0xc75, 0x1ff, 0x4, 0x5, 0x1, 0x2, 0x5ad0, 0xab, 0x7, 0x101, 0x3]}) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x1040978a, 0x4, 0xf7fffbfc, 0x80a19f, "bb08000100f167d910508b000000000000000080", 0xa0c4, 0x4000002}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) 48.319666ms ago: executing program 2 (id=1690): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x6, 0x101, 0x1, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0xb7fe, 0xf, 0x7}, {0x100004, 0x4, 0x1fc000, 0x3}, {0x3, 0x10, 0x6, 0xfff}, {0x4, 0x3, 0xe, 0x7}, {0x2, 0x20048000, 0x7d457398, 0xff}, {0x5, 0xbffffff5, 0x4, 0x9}, {0x0, 0x8, 0xfdf0, 0x4}, {0xf, 0x40c7, 0xbfa9, 0x8000}, {0x6, 0x0, 0x10001, 0x20000001}, {0xa44f, 0xfff8, 0x488, 0xe1}, {0x8000, 0x5, 0x8, 0x8}, {0x2080e0, 0x9, 0x5, 0x3ff}, {0xfffffffe, 0x0, 0xffff0001, 0xfffffff8}, {0x2, 0x5, 0x4, 0x2000b}, {0x81, 0xf3, 0x7, 0x4}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0x400040c2, 0x1, 0x0, 0xffffffc0, 0xfffeffdf, 0xffffffff, 0x0, 0x0, 0x5, 0xf5}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 48.002816ms ago: executing program 0 (id=1691): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) setitimer(0x2, 0x0, 0x0) r1 = syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r1, &(0x7f0000001600)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) 47.638609ms ago: executing program 1 (id=1692): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000480)={0x3, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x8, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe, 0x0, 0x6], [0xc41, 0x2, 0x101, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x100, 0x1ffffffffff, 0x7ffffffffffffffc, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffa], [{0x1, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x20000080}, {0x3, 0x5, 0x6, 0x2}, {0x0, 0x2000002, 0x3, 0x8}, {0x0, 0x401, 0x3, 0x2000000000000000}, {}, {0x2, 0x100, 0x31, 0x8}], {0x0, 0x5, 0x5}, {0xfffe, 0x80000000, 0x6d5, 0x1002}}}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) kevent(r1, 0x0, 0x0, &(0x7f00000000c0), 0x6, 0x0) 47.369901ms ago: executing program 7 (id=1693): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_pts() r2 = setsid() ioctl$TIOCSCTTY(r1, 0x20007461) r3 = fcntl$getown(r1, 0x5) fcntl$setown(r0, 0x6, r2) fcntl$setown(r0, 0x6, r3) 4.896056ms ago: executing program 3 (id=1694): setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSETD(r0, 0x8004745f, &(0x7f0000000000)=0x1f) 361.17µs ago: executing program 1 (id=1695): mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x6d4) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8, 0x80) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xca605601, &(0x7f0000000840)={0x10, 0x0, [{&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x4}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x80000001}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x6223}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0xdcb}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000a58000/0x3000)=nil}, {&(0x7f0000b09000/0x2000)=nil, &(0x7f0000b19000/0x4000)=nil, 0xffffffff}, {&(0x7f0000e7f000/0x1000)=nil, &(0x7f0000aba000/0x3000)=nil, 0xfffffffffffffffb}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000842000/0x3000)=nil, 0x4}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3}, {&(0x7f0000f2f000/0x4000)=nil, &(0x7f0000e2e000/0x2000)=nil, 0x400}, {&(0x7f0000b8c000/0x4000)=nil, &(0x7f0000a32000/0x4000)=nil, 0x51}], './bus\x00', 0x6, 0x7d, 0x0, 0x10000, [0x3, 0x10, 0x5, 0x8, 0x800, 0x10001, 0x3, 0x3, 0x7, 0x3, 0x5, 0x9d48, 0x7, 0xff, 0x2, 0x7, 0xa2f5, 0xea0, 0x2, 0x80000001, 0x1000, 0x0, 0x3, 0x0, 0xc70, 0xff, 0x80, 0x3, 0xffffffbd, 0xa, 0x7, 0x8, 0x7, 0x5, 0x3, 0x422, 0xa, 0x3, 0x9, 0xfffffff9, 0x6, 0x2, 0x9, 0x63, 0x1064, 0x3ff, 0x4, 0x37, 0xdd92660, 0x3, 0x2, 0xfffffff8, 0xf, 0x3, 0xaa, 0x2, 0xbc, 0x9, 0xfb4, 0x3, 0x9, 0x71ea47ba, 0xfffffffc, 0x9, 0x1000, 0x8, 0x800, 0x4, 0x4, 0x401, 0x7, 0xe, 0x1ff, 0x7, 0x5, 0xf, 0x7fff, 0x1, 0x8, 0x5, 0x5, 0x3, 0x9, 0xffff7fff, 0x3, 0x9, 0x5, 0xffff, 0x829, 0x6, 0x9, 0x7, 0xffff, 0x8001, 0x9, 0x8001, 0x8, 0x200, 0x4, 0x3, 0x8, 0x16c0000, 0x3, 0x9, 0x2, 0x5, 0x4, 0x8, 0x8, 0x9, 0x40, 0x4, 0x0, 0xa3d, 0x401, 0xe, 0x4, 0x7, 0x101, 0x8, 0x9, 0x2, 0x10001, 0x8000, 0x7, 0xfffffffe, 0x8001, 0x9, 0x741, 0xbc, 0x7fffffff, 0x9, 0xfffffff8, 0x1, 0x3b, 0x0, 0x5, 0xdef7, 0xe5, 0x101, 0x8e05, 0xf0e4, 0x10, 0x2, 0x4, 0x15ecf72c, 0x4, 0xfffffffb, 0x0, 0x4, 0x0, 0x80000001, 0xffff, 0x4, 0x0, 0xcc, 0x1, 0x7, 0x5, 0x4, 0x5, 0x3, 0x2, 0x9, 0x5, 0x8, 0x8, 0x7ff, 0x3, 0x2, 0x5, 0x101, 0x9, 0x6, 0xfffffffd, 0x52d, 0x68, 0x3, 0x83d, 0x5300, 0x4, 0xfffffffc, 0x9, 0x46, 0x4, 0x9, 0x8, 0x101, 0x6, 0x1ff, 0x401, 0x4, 0x6c6, 0x800, 0x92, 0x9, 0x3, 0x8, 0x20000, 0x2, 0x9, 0x6, 0x10001, 0x1ff, 0x7, 0x6, 0x7, 0x100, 0xffff, 0x1, 0x9, 0x1, 0x101, 0x80, 0x4, 0x9, 0x4, 0xc, 0x10, 0x6b7, 0x4, 0x8001, 0x1, 0x2, 0x6, 0x3525e7a3, 0x9, 0x1, 0x10000, 0x8, 0x6, 0x8, 0x6, 0x8, 0x3, 0x4, 0xf, 0xb3f9, 0x404, 0x8, 0x7fffffff, 0x101, 0x40, 0x3, 0xa, 0x7, 0xc67d, 0xef2, 0x40, 0x293, 0x3, 0x48ba, 0xd, 0x3, 0x9, 0x3, 0xb055, 0x4, 0x521, 0x4, 0x2, 0xe, 0x3ff, 0x1, 0x7, 0x9, 0x2, 0x3, 0x6, 0x3, 0x9, 0xc015, 0x24, 0x7, 0x7, 0x400, 0x2, 0x1, 0x5, 0x4, 0xffff0001, 0x1, 0x400, 0x8ce1, 0x0, 0x7, 0x3, 0xf, 0x5, 0x0, 0x4, 0xa, 0x10000, 0x0, 0x4, 0x2, 0x1, 0x7, 0x1, 0x80, 0x4, 0xb, 0x6, 0x1, 0xffffffff, 0x2, 0xd24c, 0x73, 0x0, 0x40, 0x9, 0x1, 0xa34, 0x5, 0x1, 0x4, 0x80000000, 0x4, 0x9, 0xfffff235, 0x9e0, 0x3, 0x0, 0x3, 0x2, 0xb5, 0x1, 0x6d, 0x84, 0x2, 0x9c, 0x9e, 0x401, 0xfffff4a4, 0xfff, 0x0, 0x1, 0x8000, 0x80000000, 0x6, 0x7, 0x8, 0x9, 0x2, 0x5, 0x7, 0x2, 0xffff, 0x1, 0x570, 0xc782, 0x1, 0x2, 0x7fffffff, 0x5, 0x664, 0x44fb, 0x8, 0x1, 0x7, 0x4000, 0x1ff, 0x6, 0xfffff2d3, 0x3, 0xfaca, 0x5, 0x7fff, 0x5, 0xffffffc0, 0x1, 0x3, 0x7, 0x2, 0x3, 0x2, 0x4, 0x36b0, 0x24b, 0x3, 0x5, 0xe000000, 0x0, 0x9, 0x5, 0x7, 0x6, 0x8, 0x2, 0x2, 0x10001, 0x0, 0xf, 0xfffffffb, 0x7, 0xfffffff8, 0x1ff, 0x5, 0x10, 0xa, 0x80000001, 0xfffffffd, 0x67b9, 0xffff8001, 0x2, 0x7, 0x2, 0x3, 0x9, 0x6, 0x93c6, 0xfffffffd, 0x7, 0x84bc, 0xfffffff7, 0x4, 0x4, 0x10, 0x4, 0x2db, 0x5, 0x104, 0x400, 0x3ff, 0x7fffffff, 0x0, 0x5, 0xcf, 0x2, 0x0, 0x1da, 0x0, 0x8, 0x6b3, 0x1, 0x7ff, 0x3, 0x4, 0xb, 0x4fb3, 0x4, 0x0, 0x1, 0x10001, 0x0, 0x8, 0x4156, 0x2, 0x5, 0xf, 0x8, 0x12d, 0xf, 0xf7, 0x3ff, 0x3, 0x2, 0x600, 0x8, 0x1, 0x1, 0x93, 0x8, 0x1, 0x9, 0xd, 0xe, 0x0, 0xf55, 0x2, 0x8, 0x4, 0xdab3, 0x0, 0xfffffffe, 0x3, 0x1, 0x0, 0x5, 0x61f, 0x4, 0x332, 0xc, 0x62a6, 0xfffffffa, 0x6, 0x166, 0xf3, 0x61b5, 0x6, 0x401, 0x3, 0x754e, 0xa0, 0x7, 0x6, 0x4, 0x3, 0x9, 0x1, 0xffff899a, 0xffff, 0x8, 0x7ff, 0x8000, 0x4, 0x8, 0x4, 0x9, 0x4, 0x0, 0xfffffff9]}) kqueue1(0x4) ioctl$TIOCSTOP(r0, 0x2000746f) 0s ago: executing program 2 (id=1696): ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000100)={{0x0, './file0\x00', [{[@v4, @v4=@multicast2], [0x8, 0xc000], 0x0, 0x2}, {[@v6=@rand_addr="360d821fef2dd8079686e0b19a462d03", @v6=@mcast2], [0x400, 0x2], 0x8, 0x2}], {{0x9, 0x4, 0x5e, 0x3}, 0x0, 0x2, 0x75, 0xd, 0x0, 0x7, 0x40}, {{0x3, 0x6, 0x2, 0x3}, 0x4c, 0x5, 0x6, 0x2, 0xe, 0xc3, 0x84}, @v4=@multicast1, 0x7, 0x9, 0x12, 0x8001, 0x81, [[0xfff, 0x9], [0x4ed, 0x8001]], [[0x2, 0x6], [0x1, 0x7ba]], 0x60, [0x2, 0x5599], 0x9, 0x1a, 0x1, 0x3, 0x2, 0x0, 0x1, 0x8, 0x2, 0x6, 0x7, 0x0, "96b0"}}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) kevent(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffb, 0x5c, 0x0, 0x2, 0x8000005}, {{}, 0xfffffffffffffffc, 0x4, 0x20000000, 0x80000e6ae}, {{}, 0xfffffffffffffffb, 0x1, 0xf0000000, 0x43, 0x1}, {{}, 0xfffffffffffffffd, 0x20, 0x40, 0x7, 0x400}, {{}, 0xfffffffffffffffb, 0x4a, 0x20000000, 0x9, 0xffffffffffffffff}, {{}, 0xfffffffffffffffc, 0x6, 0x20000000, 0xffffffffe655e552}, {{}, 0xfffffffffffffff8, 0x23, 0x1, 0x5, 0x5}, {{}, 0xfffffffffffffffa, 0x28, 0x80000000, 0x4000100, 0xfffffffffffffff8}], 0xb19, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r1 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x1ea) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error denied attempt to set clock forward to 8589934592 sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code OpenBSD/amd64 (ci-openbsd-main-4.us-central1-b.c.syzkaller.internal) (tty00) Connection to 10.128.1.149 closed by remote host. login: ¹j¼õ¬|ÿ ž¨E1\…: OpenBSD/amd64 (ci-openbsd-main-4.us-central1-b.c.syzkaller.internal) (tty00) login:                                  cP${×âðàV)»ÏÇR:ñE3¯^è7}uÿÿÿ ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped pppx: unable to set addresses for pppx1, error=17 ktrace write failed, errno 27, tracing stopped lo0: can't handle af0 ktrace write failed, errno 27, tracing stopped uvm_fault(0xffffffff83ae8a58, 0xffff800029ee6000, 0, 2) -> e kernel: page fault trap, code=2 Stopped at kcov_remote_enter+0x122: movq $0,0(%rcx) TID PID UID PRFLAGS PFLAGS CPU COMMAND *145332 46888 0 0 0x4000000 0 syz-executor kcov_remote_enter(0,ffff80002a79c490) at kcov_remote_enter+0x122 timeout_run(ffffffff8392f480,ffff80002a767800) at timeout_run+0xdf softclock_process_tick_timeout(ffff80002a767800,0) at softclock_process_tick_timeout+0x230 softclock(0) at softclock+0x152 softintr_dispatch(0) at softintr_dispatch+0xf9 dosoftint(0) at dosoftint+0x48 Xsoftclock() at Xsoftclock+0x27 writedisklabel(d02,ffffffff81d70bd0,ffff800000039000) at writedisklabel+0x1b8 sdioctl(d01,84946467,ffff800001594000,3,ffff80002f0b0fa8) at sdioctl+0x959 VOP_IOCTL(fffffd8070d4f520,84946467,ffff800001594000,3,fffffd8007ffd2d8,ffff80002f0b0fa8) at VOP_IOCTL+0xa3 vn_ioctl(fffffd806caaa350,84946467,ffff800001594000,ffff80002f0b0fa8) at vn_ioctl+0xea sys_ioctl(ffff80002f0b0fa8,ffff80002a79b9d0,ffff80002a79b920) at sys_ioctl+0x660 syscall(ffff80002a79b9d0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa0e106a1ca0, count: 1 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83ae8a58, 0xffff800029ee6000, 0, 2) -> e ddb> trace kcov_remote_enter(0,ffff80002a79c490) at kcov_remote_enter+0x122 timeout_run(ffffffff8392f480,ffff80002a767800) at timeout_run+0xdf softclock_process_tick_timeout(ffff80002a767800,0) at softclock_process_tick_timeout+0x230 softclock(0) at softclock+0x152 softintr_dispatch(0) at softintr_dispatch+0xf9 dosoftint(0) at dosoftint+0x48 Xsoftclock() at Xsoftclock+0x27 writedisklabel(d02,ffffffff81d70bd0,ffff800000039000) at writedisklabel+0x1b8 sdioctl(d01,84946467,ffff800001594000,3,ffff80002f0b0fa8) at sdioctl+0x959 VOP_IOCTL(fffffd8070d4f520,84946467,ffff800001594000,3,fffffd8007ffd2d8,ffff80002f0b0fa8) at VOP_IOCTL+0xa3 vn_ioctl(fffffd806caaa350,84946467,ffff800001594000,ffff80002f0b0fa8) at vn_ioctl+0xea sys_ioctl(ffff80002f0b0fa8,ffff80002a79b9d0,ffff80002a79b920) at sys_ioctl+0x660 syscall(ffff80002a79b9d0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa0e106a1ca0, count: -14 ddb> show registers rdi 0xffffffff rsi 0xffff800000c16c00 rbp 0xffff80002a79b340 rbx 0xffff80002a79c490 rdx 0xffff80002f0b0fa8 rcx 0xffff800029ee6000 rax 0xfffffd806cad7e40 r8 0xffff80002a79b4c8 r9 0 r10 0xb9874f7c32864606 r11 0x9795d6a71bafce4d r12 0xffffffff819017a0 endtsleep r13 0xffff80002a767768 r14 0xffff80002a79c490 r15 0 rip 0xffffffff828e6a82 kcov_remote_enter+0x122 cs 0x8 rflags 0x10297 __ALIGN_SIZE+0xf297 rsp 0xffff80002a79b320 ss 0x10 kcov_remote_enter+0x122: movq $0,0(%rcx) ddb> show proc PROC (syz-executor) tid=145332 pid=46888 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002f0b07e0,0xffffffff83a127c0 process=0xffff8000ffffad18 user=0xffff80002a796000, vmspace=0xfffffd806cacb8b0 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=1, intr=1 ddb>