last executing test programs: 1.537813839s ago: executing program 2 (id=821): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) 1.337296727s ago: executing program 2 (id=810): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x22c) setrlimit(0x1, &(0x7f0000000240)={0x2, 0x1fd}) setgroups(0x0, 0x0) r0 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xee01) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x181c, 0x8, 0x2}, 0x0, 0x0, 0x0) 1.330421989s ago: executing program 2 (id=812): mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000240)='./file0\x00', 0x800, 0x1f2ee1f15fe0ed07) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7, 0x17, 0x0, 0xfd6, 0x8, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x3, 0x4, 0xa24}, {0x0, 0xb, 0x8, 0x8}, {0x800008, 0x20f09, 0x200, 0x9}, {0x7ffffffe, 0x3, 0x9c, 0x1}, {0xc, 0x7ff, 0x5, 0x4d8a}, {0x3, 0x2, 0x3, 0x2}, {0xbca9, 0xd17e, 0x81ec, 0x2d}, {0x2, 0x836, 0x17, 0x6}, {0x2, 0x87e, 0x3e7, 0x9}, {0x1000004, 0x90, 0xd1b, 0x88}, {0x1c4, 0x5, 0x4, 0x412c8391}, {0x3, 0x6, 0x20003, 0xfc0b}, {0xc, 0x4, 0x0, 0x2}, {0x29a71720, 0x0, 0x2, 0x400004}, {0x802, 0x7, 0x7df, 0x100}, {0x7, 0x8, 0x1002, 0xc}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x7, 0x31, 0x7fffffff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x8, 0x0}) 1.235816104s ago: executing program 7 (id=806): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x5, 0xff, 0x40}, {0x6, 0x80, 0x80, 0xfffff800}]}) syz_emit_ethernet(0x126f, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) mprotect(&(0x7f00001b0000/0x2000)=nil, 0x2000, 0x2) syz_extract_tcp_res(0x0, 0x7, 0x3) 1.209301074s ago: executing program 7 (id=818): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f00007ab000/0x3000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000001}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000a6b000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000843000/0x1000)=nil, 0x3}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffe}, {&(0x7f0000a98000/0x4000)=nil, &(0x7f0000a3d000/0xd000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xe}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000795000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x81, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x5a}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000500)={0x200, 0x5, 0x1f, 0xfffff7b4, "8b0c000300e7097837b13e13355b4fb0c2f4e300", 0xfffffffd, 0xfffff7fe}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 975.699597ms ago: executing program 5 (id=832): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x2, 0x0, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0xfffffff6, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x7a, 0x1, 0x4000008, 0x5}, {0x81, 0x800, 0x9d29, 0x4000071}, {0x3, 0x803, 0x14, 0x2}, {0xffffffff, 0x82, 0x4, 0xaf}, {0x5, 0x7ffffffe, 0xd1b, 0x88}, {0x1d0, 0xa, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0x1001}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x4000009, 0x6}, {0x0, 0x2, 0x2, 0x7fff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) setsid() 963.470459ms ago: executing program 2 (id=833): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x2) ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000a40)={0xb53, 0x2, 0x6, 0x8, "b6b287e92ddd995fc0bf2d0694f2853fb9d336d9", 0x8, 0xfffffffe}) 940.887478ms ago: executing program 7 (id=835): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 905.073051ms ago: executing program 3 (id=837): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) mkdir(&(0x7f0000000280)='./file1\x00', 0xc6) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) r1 = socket(0x2, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 904.20536ms ago: executing program 2 (id=839): r0 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x10004, "000000000000000000ffff0100", 0x7}, 0x1c) r1 = socket$inet6(0x18, 0x1, 0x6) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x8001, "00000000000000001000", 0x1044}, 0x1c) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000010000000600", 0x7}, 0x1c) 817.856515ms ago: executing program 3 (id=842): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) r1 = kqueue() ioctl$DIOCIGETIFACES(r0, 0xc0284457, &(0x7f0000000300)={'./file0/file0/..', 0x0, 0x102, 0x21, 0x36d, 0x40009}) kevent(r1, &(0x7f0000000180), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) 722.176905ms ago: executing program 3 (id=845): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x10000, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x1a123559, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x302, 0x54, 0x8}, {0x2, 0x82, 0x5, 0xa}, {0x4, 0x8001, 0xd1b, 0x100}, {0x1ce, 0x9, 0xf7, 0x3}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x8}, {0x29a71717, 0x7f, 0x5, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) read(r0, &(0x7f0000000240)=""/168, 0xa8) 721.799737ms ago: executing program 5 (id=846): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000000)={0x3, 0x4000b3f, {[0xfffffbfffffffff7, 0x1, 0x2, 0x4ca, 0x4, 0x0, 0xdf60, 0x0, 0x400000, 0x3, 0xfffffffffffffffc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x5579, 0x5e, 0x7b98, 0xf610, 0xfffffffffffffffc, 0x6], [0xc44, 0xfffffffffffffffe, 0xa, 0x0, 0xb, 0x10fff, 0xffffffff00000001], [0x800000005, 0x8000000000000000, 0x7ffffffffffffffc, 0x7fff, 0xfffffffffffffffe, 0xfffffffffffffffa], [{0xc78, 0x4, 0xffffff89, 0x7d06}, {0xfffc, 0x2, 0x5, 0x9}, {0x7, 0x20000000, 0xfffffffe, 0x1}, {0x3, 0x5, 0x2, 0x2}, {0xe5, 0x2000002, 0x3}, {0x0, 0x3fe, 0x3, 0x1000}, {0xd, 0x1}, {0x401, 0x104, 0x31, 0x8}], {0x0, 0x8001, 0x5, 0x1}, {0xfffe, 0x0, 0x6d5, 0x1002}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) write(r0, 0x0, 0x0) 720.751789ms ago: executing program 5 (id=848): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r0, 0x3}) open(&(0x7f0000000240)='./file0\x00', 0x20, 0x34) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x1c) 656.142858ms ago: executing program 3 (id=852): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000100)='./file2/file0\x00', &(0x7f0000000140)='./file0\x00') 616.774634ms ago: executing program 0 (id=854): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000140)={{0x1c, 0x18, 0x1, 0x6, "5bde75dd5819802560e83b1654cb44b3", 0x4}, {0x1c, 0x18, 0x0, 0x6, "8369a7fcb416ba26374fe42253619c3f", 0x7}, 0x3, [0x100, 0x3, 0x1, 0x19a1, 0x3, 0x8000, 0x4, 0x6f06]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f0000000580)={{0x1c, 0x18, 0x1, 0x7, "cf8e211a0e1250dede07891e102534d7", 0x6}, {0x1c, 0x18, 0x0, 0x2, "c338a80ba1d24f94cc2cf915bff3fbe4", 0x7f}, 0xe5, [0xa, 0x80000000, 0xfffffffa, 0x0, 0x8, 0x5, 0x2e8, 0x4]}, 0x5c) 616.488795ms ago: executing program 0 (id=855): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000001540)={0x40000000000000cd}) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x300000003}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000200000003e0004", 0xd, 0x40a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000410001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b78043343a638b8c1d7c65f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 615.821087ms ago: executing program 2 (id=856): mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x80000000}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x80}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3976fdec, './file0\x00', [{[@v6=@ipv4={'\x00', '\xff\xff', @loopback}], [0x6, 0x40], 0xfffe, 0x28}, {[@v4=@loopback, @v4=@multicast1], [0x6, 0x2], 0x4, 0x18}], {{0x247, 0x3, 0x1, 0x7ff}, 0xd, 0x409, 0x80, 0xfff, 0x80, 0x17, 0xe}, {{0x5, 0x2, 0xff, 0x7}, 0x8002, 0x7, 0x2, 0x6, 0x9, 0xf0, 0xac}, @v4=@rand_addr=0x2c5c, 0x0, 0x9, 0x2, 0x0, 0x6, [[0xfffffff7, 0x4], [0x2, 0x8350]], [[0x3, 0x603f], [0x20007, 0x3]], 0x1, [0x0, 0x7], 0x0, 0x2, 0x6, 0x2, 0x0, 0x3, 0xb, 0x83, 0x1, 0x8, 0x9, 0xce51}}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) 608.963165ms ago: executing program 0 (id=858): r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_open_pts() fcntl$lock(r2, 0x8, &(0x7f00000000c0)={0x3, 0x2, 0x8, 0x1000300000004}) flock(r2, 0x1) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x40000000000007f, 0x100000001}) closefrom(r1) 529.911533ms ago: executing program 0 (id=859): r0 = syz_open_pts() close(r0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000001c0)={0x2df57367, 0xffffc765, 0xd, 0xfdff7dfc, "0a6400b70700605c9b0051696203000000020400", 0x4, 0x10003ff}) writev(r0, &(0x7f0000001b80)=[{&(0x7f0000001340)="b3ecd12f", 0x4}], 0x1) 519.002158ms ago: executing program 0 (id=861): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1, 0x9}) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x3}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 484.263064ms ago: executing program 0 (id=863): setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() write(r0, &(0x7f0000000c00)="29049fcdeda958714165f8b219d4902b7b7afbe8c0d73c6f562fbbcb6884dc920b1109334b86a57537d74e8f0f3b3b4bf2fdc6165a7bf81321fb03e275f6bfb1d7d68d689b4b3f274c3b56b5543486927cd80e46b35ba722484daa878681345acbf516b56864298238c347a95dae8b27401fbd2fb8", 0x75) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0xd3c4, 0x58, 0x4403, 0xffffff8c, "08d095190000a1ecd8f90deaf12f9ef26570ec00", 0x80001, 0x7}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 446.728801ms ago: executing program 4 (id=864): chmod(&(0x7f0000000040)='.\x00', 0x35f) setuid(0xee01) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) closefrom(r0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) 336.370587ms ago: executing program 4 (id=867): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x4, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x1000000004, 0x0}) 260.465407ms ago: executing program 5 (id=870): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setuid(0xee01) r0 = msgget$private(0x0, 0x1ba) unveil(0x0, 0x0) mknod(0x0, 0x2000, 0x33b9) msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 259.041354ms ago: executing program 7 (id=871): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0xf94a14e19cec2761, 0x0) mmap(&(0x7f000032d000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x0) 169.536814ms ago: executing program 1 (id=873): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$DIOCGETQUEUE(r0, 0xc148445f, &(0x7f00000002c0)={0x8, 0x9bef, {'\x00', './bus/file0\x00', './bus/file0\x00', './bus/file0\x00', {{0x2, 0x9}, {0xa746, 0x4}}, {{0x7, 0x8}, {0x7fff}, 0x9}, {{0x8000, 0x8}, {0xfffffffffffffffa, 0x1}, 0x8}, {0x56, 0x9, 0xbbe2, 0x80000000}, 0x0, 0x0, 0x0, 0x6}}) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000180), 0x96, &(0x7f0000000540), 0xfffb4965, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000140)={0x805, 0x100, 0x4, 0x2000406, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) 169.222401ms ago: executing program 1 (id=874): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x64, 0x6d, 0x5, 0x8}, {0x7, 0xf0, 0x24, 0x8fe}, {0x6, 0x28, 0x0, 0x100004}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x81, 0x7f, 0x1, 0x9}, {0x48, 0x9, 0xe, 0xf}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 169.035649ms ago: executing program 4 (id=875): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r1, r1, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r3, 0x0) 168.936476ms ago: executing program 5 (id=876): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x4, 0x0, 0xc14}, {0x0, 0x7, 0x0, 0x1}, {0x6, 0x0, 0x45, 0x10000}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r0, 0x80206910, &(0x7f00000001c0)) r1 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r1, 0x8020691f, &(0x7f00000001c0)) 140.950226ms ago: executing program 7 (id=878): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x6, 0x7, 0x7}, {0x24, 0xf0, 0xff}, {0x6, 0x5, 0xb6, 0xf}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x5c, 0x8, 0xf7, 0x2009}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 140.725959ms ago: executing program 1 (id=879): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x20) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x80) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) 140.382474ms ago: executing program 4 (id=880): r0 = socket(0x18, 0x3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0x6, 0x71800}, {0x1, 0xb85e, 0x800002, 0x7}, {0x100006, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffe}, {0x44, 0x3, 0x80000001, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0x131, 0x7, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x9}, {0x0, 0x7, 0x34}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38c000, 0xfffffff7}, {0xcb, 0x2, 0x8, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x10008, 0xe2, 0xfffffff5, 0xfffffff8}, {0x5, 0x5, 0x24, 0x4}, {0x5, 0x5655, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) setitimer(0x1, &(0x7f0000000140)={{0xcdc, 0x5}, {0xfffffffffffffff8, 0x11}}, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 139.969135ms ago: executing program 7 (id=882): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0xffff65d5, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x1ff, 0x3, 0x14, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x7, 0xa}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x6, 0x4}, {0x1c8, 0x10001, 0xc, 0x6}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x20000001, 0xfff, 0x9}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) unveil(0x0, &(0x7f0000000180)='x\x00') 136.305653ms ago: executing program 1 (id=883): ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) 132.318905ms ago: executing program 4 (id=884): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00', 0x0, 0x1, 0x0, 0x43b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) faccessat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x3e, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x7, 0x7, 0xe1, 0x543, "22ef0600000000fda92be2f9000000007f007600", 0x7, 0x2}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 128.56868ms ago: executing program 6 (id=885): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x64, 0x6c, 0x5, 0x8}, {0x4, 0xf0, 0x1, 0x900}, {0x6, 0x24, 0x0, 0x4}]}) sysctl$kern(0x0, 0x4000000000000070, &(0x7f0000000100)="91287ea7a8000000000000000000f3006b1b69a2fb8452a9291f88fdb0b1611a6a2455afe138fe6fcbdd4147f4cbcbb3fe473ba08dd6ce771fb60a57744ce015f0a4bf879cc2494254018d91a901b4df7bde6b60", &(0x7f0000000000)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) 102.696098ms ago: executing program 1 (id=886): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() read(r0, &(0x7f00000001c0)=""/136, 0x88) ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x2) writev(r1, &(0x7f00000019c0)=[{&(0x7f0000000280)="2aa8f9ca90", 0x5}], 0x1) 76.738418ms ago: executing program 4 (id=887): sendmmsg(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x6, "450a93157bdc3752559c60a171000b1b", 0x5}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) 75.885656ms ago: executing program 6 (id=888): r0 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r0, 0x20007461) r1 = syz_open_pts() closefrom(r1) syz_open_pts() openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) 70.876075ms ago: executing program 6 (id=889): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="91287ea7a80000000000000000000000000000f3006b1b69a2fb8452a9291f34113e88fd76a2d781e02a7de4a57a64da65682da841024aa000"/68, &(0x7f0000000000)=0x44, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000180)="460cf2c05e3e45fc20107b65d551", 0xe) 56.488904ms ago: executing program 6 (id=890): open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xd7, 0x1, 0x800000002, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x7, 0xd, 0x4, 0x6, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0xd, 0x800, 0x9, 0x0, 0x1], [0x100000001, 0x8000, 0x40000000, 0x0, 0x7fffffff, 0x11000, 0xfffffffeffffffff], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x9a92, 0x0, 0x1, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x1b50, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x3, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x4, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f0000000240)={0x0}, &(0x7f0000000580)=0xc) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) 54.910816ms ago: executing program 3 (id=891): open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) setgroups(0x0, 0x0) r0 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xee01) r1 = socket(0x18, 0x2, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x3, 0x10000008, "0000000000000000000000000100", 0x101}, 0x1c, 0x0, 0x0, 0x0}, 0x402) 1.20245ms ago: executing program 6 (id=892): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) r1 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setuid(0xffffffffffffffff) write(r0, &(0x7f0000000200)="a8", 0x1) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) ppoll(0x0, 0x0, &(0x7f0000000180)={0x1000a, 0x8000000000000001}, 0x0) 810.319µs ago: executing program 3 (id=893): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0x101, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x4, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x14, 0xe}, {0xffefffff, 0xe2b4, 0x40000003, 0x6}, {0x4, 0x8a, 0x410001, 0x1ff}, {0x1e2, 0x400fff9, 0x927c, 0x7}, {0x16, 0x25, 0x9, 0x2d0b}, {0x3, 0x2, 0x80000001, 0x408}, {0x29a71718, 0x6, 0xfff, 0x2579}, {0x0, 0xf8f, 0x8}, {0xfffffffd, 0x800bd3d, 0xf778, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) ioctl$DIOCCLRSTATUS(r0, 0xc0284416, &(0x7f00000006c0)={'./file0aaaaaaaaa', 0x0, 0x0, 0x4, 0x7, 0x1000001}) 522.942µs ago: executing program 5 (id=894): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) setuid(0xffffffffffffffff) closefrom(r0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x23, 0x0, 0x4}, {0x7, 0x0, 0x40, 0x20000}, {0x6, 0x0, 0x0, 0x10001}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 287.768µs ago: executing program 6 (id=895): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r1, &(0x7f0000001300), &(0x7f0000000040)=0x1006) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) ioctl$DIOCXCOMMIT(r0, 0xc0104452, &(0x7f0000000940)={0x0, 0x7, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=896): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x800, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79b9, 0x8, 0x10, [{0x3, 0x7, 0x2000000, 0x100}, {0x7, 0x88, 0x8008, 0x7}, {0x101, 0x9, 0x0, 0x9}, {0x9, 0xd}, {0x4, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0xffffffff, 0x5}, {0xce3, 0x4, 0x4f5, 0x2}, {0xe, 0x801, 0xc, 0x8b}, {0x1, 0x82, 0x5, 0x9}, {0x24007, 0x100, 0xd1a, 0x11087}, {0x1e9, 0x2, 0x1, 0x6}, {0x800, 0x6, 0x8, 0x9}, {0x10001, 0x4, 0x8, 0x2}, {0x29a7171a, 0x8, 0x1, 0x7}, {0xc, 0x100000b, 0x1, 0x7}, {0x0, 0x1, 0x0, 0x30001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xe, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) r1 = socket(0x1e, 0x3, 0x0) shutdown(r1, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. Connection to 10.128.1.149 closed by remote host. Rÿy´~ÍC¬ï·hinit: getty repeating too quickly on port /dev/tty00, sleeping                                                                                                             OpenBSD/amd64 (ci-openbsd-main-4.us-central1-b.c.syzkaller.internal) (tty00) login: ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped uvm_fault(0xffffffff839ce170, 0xffff800026a92004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *173993 19188 0 0x2 0 0 syz-executor ufs_readdir(ffff80002a817860) at ufs_readdir+0x26e VOP_READDIR(fffffd8069668db0,ffff80002a8178e8,fffffd8007ffd8f0,ffff80002a81792c) at VOP_READDIR+0x125 sys_getdents(ffff80002f0aa020,ffff80002a817a70,ffff80002a8179c0) at sys_getdents+0x2dd syscall(ffff80002a817a70) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x709fb000f110, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff839ce170, 0xffff800026a92004, 0, 1) -> d ddb> trace ufs_readdir(ffff80002a817860) at ufs_readdir+0x26e VOP_READDIR(fffffd8069668db0,ffff80002a8178e8,fffffd8007ffd8f0,ffff80002a81792c) at VOP_READDIR+0x125 sys_getdents(ffff80002f0aa020,ffff80002a817a70,ffff80002a8179c0) at sys_getdents+0x2dd syscall(ffff80002a817a70) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x709fb000f110, count: -5 ddb> show registers rdi 0x200 rsi 0x800 rbp 0xffff80002a817850 rbx 0x200 rdx 0 rcx 0xfffffd8076569d38 rax 0xffff800026a92200 r8 0xffffffffffffffff r9 0x3 r10 0x6b3a56c3559c4574 r11 0x7644be3a61c79ed2 r12 0 r13 0xffff80002a8178e8 r14 0xffff800026a92000 r15 0xffff800026a92008 rip 0xffffffff8267a13e ufs_readdir+0x26e cs 0x8 rflags 0x10283 __ALIGN_SIZE+0xf283 rsp 0xffff80002a8176a0 ss 0x10 ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx ddb> show proc PROC (syz-executor) tid=173993 pid=19188 tcnt=1 stat=onproc flags process=2 proc=0 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002f0aad18,0xffff8000394d7a28 process=0xffff80002f0af198 user=0xffff80002a812000, vmspace=0xfffffd807ec67730 estcpu=36, cpticks=3, pctcpu=0.2, user=0, sys=3, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 43507 72507 36474 0 2 0 syz-executor 43507 40703 36474 0 3 0x4000080 fsleep syz-executor 7074 300376 23326 0 2 0 syz-executor 7074 56062 23326 0 3 0x4000080 fsleep syz-executor 35250 280178 76024 0 2 0 syz-executor 35250 22830 76024 0 3 0x4000080 fsleep syz-executor 4687 430765 38543 0 2 0 syz-executor 4687 470646 38543 0 2 0x4000000 syz-executor *19188 173993 78340 0 7 0x2 syz-executor 23326 383601 78340 0 2 0xc82 syz-executor 80117 437307 1 0 3 0x100083 ttyin getty 89167 334392 0 0 3 0x14200 acct acct 53196 252522 0 0 3 0x14280 nfsidl nfsio 45231 138860 0 0 3 0x14280 nfsidl nfsio 70926 243765 0 0 3 0x14280 nfsidl nfsio 54506 390965 0 0 3 0x14280 nfsidl nfsio 67324 367925 0 0 3 0x14280 nfsidl nfsio 36206 57050 0 0 3 0x14280 nfsidl nfsio 32592 449409 0 0 3 0x14280 nfsidl nfsio 67039 386876 0 0 3 0x14280 nfsidl nfsio 50252 484455 0 0 3 0x14280 nfsidl nfsio 29527 249745 0 0 3 0x14280 nfsidl nfsio 73952 175412 0 0 3 0x14280 nfsidl nfsio 70692 87299 0 0 3 0x14280 nfsidl nfsio 94900 268300 0 0 3 0x14280 nfsidl nfsio 75441 312719 0 0 3 0x14280 nfsidl nfsio 34629 310556 0 0 3 0x14280 nfsidl nfsio 96574 88502 0 0 3 0x14280 nfsidl nfsio 83934 443447 0 0 3 0x14280 nfsidl nfsio 17740 122659 0 0 3 0x14280 nfsidl nfsio 96501 126766 0 0 3 0x14280 nfsidl nfsio 99820 75133 0 0 3 0x14280 nfsidl nfsio 66092 195169 78340 0 2 0x10000c82 syz-executor 36474 206363 78340 0 2 0xc82 syz-executor 38543 156208 78340 0 2 0xc82 syz-executor 69565 299511 78340 0 2 0x2 syz-executor 76024 375547 78340 0 2 0xc82 syz-executor 78340 305628 1 0 3 0x82 wait syz-executor 84486 345256 0 0 3 0x14200 bored smr 40881 142275 0 0 2 0x14200 zerothread 12900 225626 0 0 3 0x14200 aiodoned aiodoned 56641 278472 0 0 3 0x14200 syncer update 97634 514004 0 0 3 0x14200 cleaner cleaner 89785 55436 0 0 3 0x14200 reaper reaper 72070 140177 0 0 3 0x14200 pgdaemon pagedaemon 55198 197609 0 0 3 0x14200 bored viomb 53994 512262 0 0 3 0x40014200 acpi0 acpi0 97129 106644 0 0 3 0x14200 bored softnet0 96887 262217 0 0 3 0x14200 bored systqmp 56420 460126 0 0 3 0x14200 bored systq 77310 195133 0 0 3 0x40014200 tmoslp softclock 65959 145541 0 0 3 0x40014200 idle0 1 259453 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11036 12115K 12319K 166960K 12892 0 pcb 17 12K 12K 166960K 154 0 rtable 182 14K 16K 166960K 588 0 pf 33 13K 18K 166960K 197 0 ifaddr 31 5K 7K 166960K 97 0 ifgroup 46 2K 2K 166960K 141 0 sysctl 3 1K 9K 166960K 7 0 counters 32 17K 18K 166960K 81 0 ioctlops 0 0K 4K 166960K 135 0 iov 0 0K 12K 166960K 21 0 mount 1 1K 1K 166960K 1 0 log 1 0K 0K 166960K 5 0 vnodes 1298 82K 82K 166960K 1864 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 10 0K 0K 166960K 12 0 dirhash 12 2K 3K 166960K 60 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 13 49K 93K 166960K 1072 0 sigio 0 0K 0K 166960K 10 0 proc 20 25K 91K 166960K 629 0 subproc 72 4K 4K 166960K 99 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 23 0 in_multi 65 4K 7K 166960K 177 0 ether_multi 1 0K 0K 166960K 17 0 mrt 0 0K 0K 166960K 51 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 103 466K 466K 166960K 103 0 exec 0 0K 1K 166960K 448 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 104 81K 167K 166960K 10188 0 UVM aobj 7 2K 2K 166960K 7 0 pinsyscall 16 32K 94K 166960K 2259 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 50 0 NDP 12 0K 2K 166960K 66 0 temp 44 9104K 9150K 166960K 28912 0 kqueue 1 2K 29K 166960K 173 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 57 0 57 1 0 1 1 0 8 1 rtentry 136 172 0 100 4 0 4 4 0 8 0 unpcb 144 261 0 260 1 0 1 1 0 8 0 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 94 0 93 1 0 1 1 0 8 0 arp 96 25 0 15 1 0 1 1 0 8 0 ipq 40 3 0 1 1 0 1 1 0 8 0 ipqe 40 4 0 2 1 0 1 1 0 8 0 inpcb 328 385 0 384 1 0 1 1 0 8 0 nd6 112 34 0 20 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 11 0 3 1 0 1 1 0 8 0 ppxss 1072 38 0 38 2 1 1 1 0 8 1 pppxif 1416 5 0 5 1 0 1 1 0 8 1 pfstscr 40 35 0 26 1 0 1 1 0 8 0 pfrktable 1344 20 0 20 2 1 1 1 0 8 1 pfanchor 1288 11 0 10 1 0 1 1 0 8 0 pftag 88 7 0 6 2 1 1 1 0 8 0 pfstitem 24 15 0 5 1 0 1 1 0 8 0 pfstkey 128 33 0 25 1 0 1 1 0 8 0 pfstate 384 19 0 13 1 0 1 1 0 8 0 pfrule 1360 29 0 29 2 1 1 1 0 8 1 rttmr 136 13 0 13 2 1 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 891 0 578 31 4 27 31 0 8 6 art_table 40 893 0 578 5 0 5 5 0 8 0 art_node 32 172 0 107 1 0 1 1 0 8 0 sysvmsgpl 40 6 0 2 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 72 9 0 1 1 0 1 1 0 8 0 shmpl 112 4 0 0 1 0 1 1 0 8 0 dirhash 1024 49 0 32 3 0 3 3 0 8 0 dino2pl 256 3070 0 1608 92 0 92 92 0 8 0 ffsino 256 3071 0 1609 92 0 92 92 0 8 0 nchpl 144 4289 0 2589 64 0 64 64 0 8 0 vnodes 216 3410 0 0 190 0 190 190 0 8 0 namei 1024 12670 0 12670 1 0 1 1 0 8 1 pfiaddrpl 120 4 0 4 1 0 1 1 0 8 1 kstatmem 264 89 0 68 2 0 2 2 0 8 0 scsiplug 72 6 0 6 2 1 1 1 0 8 1 scxspl 216 20893 0 20893 4 2 2 3 1 8 2 plimitpl 152 215 0 204 1 0 1 1 0 8 0 sigapl 424 1386 0 1335 8 1 7 7 0 8 0 knotepl 120 37812 0 37795 28 18 10 17 0 8 8 kqueuepl 184 183 0 182 1 0 1 1 0 8 0 pipepl 304 137 0 110 3 0 3 3 0 8 0 fdescpl 448 1351 0 1335 5 1 4 5 0 8 0 filepl 120 4726 0 4569 7 0 7 7 0 8 0 lockfpl 104 262 0 262 1 0 1 1 0 8 1 lockfspl 48 105 0 105 1 0 1 1 0 8 1 sessionpl 144 54 0 51 1 0 1 1 0 8 0 pgrppl 48 65 0 54 1 0 1 1 0 8 0 ucredpl 104 1263 0 1260 1 0 1 1 0 8 0 zombiepl 144 1337 0 1335 2 1 1 1 0 8 0 processpl 1152 1386 0 1335 4 0 4 4 0 8 0 procpl 664 2440 0 2385 6 0 6 6 0 8 0 sockpl 552 706 0 704 3 0 3 3 0 8 2 mcl64k 65536 519 0 519 2 1 1 1 0 8 1 mcl16k 16384 233 0 233 2 1 1 1 0 8 1 mcl12k 12288 107 0 107 1 0 1 1 0 8 1 mcl9k128 9344 50 0 50 2 1 1 1 0 8 1 mcl8k 8192 142 0 142 2 1 1 1 0 8 1 mcl4k 4096 4354 0 4300 14 6 8 13 0 8 0 mcl2k2 2112 2 0 2 1 1 0 1 0 8 0 mcl2k 2048 383 0 381 4 1 3 3 0 8 2 mtagpl 96 24 0 20 1 0 1 1 0 8 0 mbufpl 256 15682 0 15590 23 5 18 18 0 8 6 bufpl 280 8640 0 2424 445 0 445 445 0 8 0 anonpl 24 186933 0 185640 69 22 47 52 0 186 24 amapchunkpl 152 33803 0 33545 35 8 27 28 0 158 12 amappl16 200 3651 0 3627 29 15 14 18 0 8 8 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 535 0 535 1 0 1 1 0 8 1 amappl13 176 123 0 122 1 0 1 1 0 8 0 amappl12 168 1616 0 1601 2 0 2 2 0 8 0 amappl11 160 3 0 3 1 1 0 1 0 8 0 amappl10 152 58 0 58 1 0 1 1 0 8 1 amappl9 144 267 0 267 1 1 0 1 0 8 0 amappl8 136 105 0 105 1 0 1 1 0 8 1 amappl7 128 152 0 150 1 0 1 1 0 8 0 amappl6 120 181 0 181 1 0 1 1 0 8 1 amappl5 112 89 0 89 1 0 1 1 0 8 1 amappl4 104 271 0 269 1 0 1 1 0 8 0 amappl3 96 7122 0 7066 4 0 4 4 0 8 1 amappl2 88 544 0 539 2 0 2 2 0 8 0 amappl1 80 14228 0 1