last executing test programs: 3.893173906s ago: executing program 6 (id=1187): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x100) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) fsync(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ktrace(0x0, 0x4, 0x20001916, 0xffffffffffffffff) setrlimit(0x6, &(0x7f0000000980)={0x42, 0x67}) 2.946398326s ago: executing program 6 (id=1247): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) rename(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.941592132s ago: executing program 3 (id=1248): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) open(0x0, 0x80000000000206, 0xd6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x2, 0x4a1) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x34, 0xffff, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x1}) setuid(0xffffffffffffffff) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000340)=""/164) 2.910290115s ago: executing program 3 (id=1249): ktrace(0x0, 0x25, 0x510, 0x0) r0 = semget$private(0x0, 0x4, 0x590) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x34, 0xffff, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x1}) semop(r0, &(0x7f0000000080)=[{0x1, 0x0, 0x800}, {0x1, 0xf34, 0x800}, {0x2, 0x7, 0x800}, {0x0, 0xf7a}, {0x2, 0x3, 0x1000}], 0x5) setuid(0xffffffffffffffff) semctl$GETALL(r0, 0x0, 0x6, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{}, {0x4, 0x5, 0x1800}, {0x1, 0xfffd}], 0x3) 2.837043575s ago: executing program 6 (id=1250): sendmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404}, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) write(r0, &(0x7f0000000580)="9ca812d8", 0x4) 2.52144301s ago: executing program 7 (id=1283): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r0 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xffffffffffffffff) r1 = socket(0x2, 0x1, 0x0) sendmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000180)=@file={0x1}, 0xa, 0x0, 0x0, &(0x7f00000005c0)=[@rights={0x10}], 0x10, 0x10}, 0x404) 2.495789588s ago: executing program 1 (id=1286): r0 = syz_open_pts() close(r0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) socket(0x18, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x100, 0xc2) open(&(0x7f0000000000)='./file0\x00', 0x100, 0xc2) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000480)={0xf66f, 0x401, 0x5, 0x5ffbfb5d, "4200d078ca610000000000000000000300", 0x1, 0x10}) ioctl$TIOCSTART(r0, 0x2000746e) 2.474851353s ago: executing program 1 (id=1289): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000740)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x8000, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) r2 = kqueue() kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) 2.450817659s ago: executing program 5 (id=1290): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffa, 0x400000000, 0x4787, 0x1002, 0x8001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x5, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0x0, 0x2, 0xffff, 0x7b96, 0x6, 0x1, 0xfffffffffffffffe], [0x5ad8, 0x3, 0x3ffffffb, 0x0, 0xffffffffffffffff, 0x872a, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xffffffffffffffff, 0x8000000100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x6}, {0x0, 0x2, 0x5, 0x10}, {0x0, 0x25, 0x3, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x4, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x4000000, 0x400001, 0x200}, {0x8, 0x965, 0x0, 0x8}], {0x12, 0x6, 0xb}, {0x21, 0x0, 0x100000b0, 0x2}}}) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x96, 0x0, 0xfffa4961, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) 2.377156839s ago: executing program 4 (id=1291): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xffffffff, 0x51, 0x2100007, 0x6, 0x1, 0x80000003, 0x10001, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0x5}, {0x1000008, 0xf86, 0x0, 0x9}, {0x401, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x103}, {0x1ce, 0x10001, 0xf7, 0x1}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$DIOCXROLLBACK(r1, 0xc0104453, &(0x7f0000002340)={0x0, 0x408, 0x0}) 2.376733455s ago: executing program 5 (id=1292): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6a}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x100}, {0x1ce, 0x10001, 0xf7, 0x3}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x3, 0x400000000009, 0x5, 0x8000000000000001}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) 2.376130921s ago: executing program 7 (id=1294): sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffffa, 0x1, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0xdf5a, 0xffffffffffffffff, 0x0, 0x2eff, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0xa8, 0x100000001, 0x7], [0xfffffffffffffffe, 0x2, 0xfffffffffffffffa, 0x8000ffffffff, 0x100, 0x7b99, 0x1fe, 0xb, 0x1, 0x8], [0x100000001, 0xfffffffffffffffe, 0x40000000, 0x6, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0x8}, {0xfffc, 0x7, 0x5, 0x1}, {0x10, 0x2001, 0x5bea, 0x814}, {0xf801, 0x5, 0x7ff, 0x8000000c}, {0x10, 0x2, 0x4, 0x808}, {0x400b, 0x1, 0x40000, 0x4}, {0xa, 0x20000, 0x4, 0x8}, {0x3, 0x965, 0x3, 0x4}], {0x2000, 0x8, 0x10000}, {0x0, 0x0, 0x3, 0x2}}}) r0 = kqueue() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x2, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x2}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kevent(r0, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0) close(r0) 2.375671215s ago: executing program 2 (id=1295): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc0, 0x3, 0x0, 0x3, 0xfffeffff, 0x3, 0x1, 0x2, 0x3, 0xff}) r1 = socket(0x2, 0x3, 0x0) getsockopt(r1, 0x0, 0x2, 0x0, 0x0) poll(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 2.15290392s ago: executing program 4 (id=1296): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x4, 0x7fc00000, 0x5, 0x10, [{0x10000000, 0x7fffffff, 0x3, 0x3}, {0x8101, 0xfffffffe, 0x9, 0x2}, {0x20003, 0x8000b82, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x2, 0x7}, {0x42, 0x3be, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004fc, 0x10}, {0x80000000, 0xf, 0x14, 0x66}, {0x7f, 0xe2b4, 0x40040003, 0x6}, {0x4, 0x8a, 0x410001, 0x1ff}, {0x1e2, 0x400fff9, 0x927c, 0x7}, {0x16, 0x28, 0x5, 0x2d0b}, {0x3, 0x2, 0x80000004, 0x408}, {0x29a71718, 0xd, 0xfff, 0x2579}, {0x7, 0xf8f, 0x8}, {0xfffffbfd, 0x800bd3d, 0xf778, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000), 0x100000000000023f) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000003940)=[{&(0x7f0000002800)=""/4096, 0x1000}], 0x1, 0x8000000000000000) 2.152473792s ago: executing program 5 (id=1297): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xfffffff7, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x5, 0x10, [{0x3, 0x9, 0x4, 0x70ffc}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xfff, 0x0, 0x9}, {0x1, 0x807, 0x8007}, {0x401, 0x200726, 0x2800, 0x1}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x304, 0x54, 0x8}, {0x2, 0x7, 0x5, 0x20000009}, {0x4, 0x8001, 0x593e, 0x100}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7, 0x9, 0xfffffffd, 0x9}, {0xab, 0x0, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x4, 0x101002, 0x30001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) r1 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x404) 2.151991778s ago: executing program 0 (id=1298): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f000027a000/0x2000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00', 0x0, 0x1, 0x0, 0x43b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000]}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x10100, &(0x7f00000001c0), 0x642705d8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.15174378s ago: executing program 2 (id=1299): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000080)='\t\x00\x00\x00', 0x4) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x8f38, "ffe54a09470300261febf2fc8dc83304", 0x1}, 0x1c) r1 = openat$pf(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc4504443, 0x0) fstat(r1, 0x0) setgroups(0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="80f21360258ef28489c6dffd739397326c016cbfaa7323d7d1546eb45bab55db07edc5685ab7afab4b9e6fc8110701774d9ce8291e55a90832f392a6df61ae8285bf6ada0b1d56579b800a69465b931b3086159af8bd33dc87d70cd28009f75290061b81713b287c931aacf19abb1fded49361decf54eb24ce35a619caaa9e2e40566b51a0d88b18c7a0915ee4ffcb6956770da7c5ac8a7fc36f70f2dcd1890d761c625ab893cbd9e33f5bc66cfc8c2f2f1d94969f0b10cdb8", 0xb9}], 0x1) 2.063676981s ago: executing program 3 (id=1300): r0 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r3, r3, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000780)={{r2, r3, r2, r3, 0x8f, 0x1a00, 0x0, 0x0, 0xb}, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semget(0x0, 0x3, 0x281) 2.058478829s ago: executing program 0 (id=1301): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) setsid() r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x9) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000300), 0xff7ec701fa049124, 0x0) read(r2, &(0x7f0000000100)=""/126, 0x7e) 1.981223013s ago: executing program 5 (id=1302): r0 = kqueue() fcntl$dupfd(r0, 0xa, r0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(0x0, 0x2000, 0x4287e) r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) r2 = getppid() fcntl$setown(r1, 0x6, r2) fcntl$setown(r1, 0x6, 0x0) 1.979684775s ago: executing program 2 (id=1303): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x6, 0xf, 0x8}, {0x28, 0xf0, 0xff, 0x10001}, {0x6, 0x2, 0xb6, 0xf}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="91287ea7a80000000000000000000000000000f3006b1b69a2fb8452a9291f34113e88fd76a2d781e02a7de4", &(0x7f0000000000)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x9, 0x6, "529c37", 0x30, 0x0, 0x96, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x2, 0x6, "af7eff", 0x0, 0x1d, 0x8, @mcast2, @loopback}}}}}}}) 1.872177751s ago: executing program 7 (id=1304): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x80000000}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x80}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) r0 = socket(0x2, 0x3, 0x11) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000040)="55fdb050ab5b45d498800a61e87d2c7d43d937d1ff1992f871f120faaaf19dfd65118ba2b91afc99b80dc008d8890450b0d47ee3c49ee701f238beeb638dfa089b2e0763d43ceed09e2eea8303021e48a0e722619b9ba94b709d2d27571345239ca73815167971edcbdb20667e360e957bf872267add0f7eb527e4d67bdd5388b2123e7b0374e3bfcb93c111d59549a2bf", 0x91) 1.871964618s ago: executing program 4 (id=1305): r0 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r0, 0x20007461) openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = socket(0x2, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) 1.869989632s ago: executing program 6 (id=1306): ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000100)={{0x0, './file0\x00', [{[@v4, @v4=@multicast2], [0x8, 0xc000], 0x0, 0x2}, {[@v6=@rand_addr="360d821fef2dd8079686e0b19a462d03", @v6=@mcast2], [0x400, 0x2], 0x8, 0x2}], {{0x9, 0x4, 0x5e, 0x3}, 0x0, 0x2, 0x75, 0xd, 0x0, 0x7, 0x40}, {{0x3, 0x6, 0x2, 0x3}, 0x4c, 0x5, 0x6, 0x2, 0xe, 0xc3, 0x84}, @v4=@multicast1, 0x7, 0x9, 0x12, 0x8001, 0x81, [[0xfff, 0x9], [0x4ed, 0x8001]], [[0x2, 0x6], [0x1, 0x7ba]], 0x60, [0x2, 0x5599], 0x9, 0x1a, 0x1, 0x3, 0x2, 0x0, 0x1, 0x8, 0x2, 0x6, 0x7, 0x0, "96b0"}}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) kevent(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffb, 0x5c, 0x0, 0x2, 0x8000005}, {{}, 0xfffffffffffffffc, 0x4, 0x20000000, 0x80000e6ae}, {{}, 0xfffffffffffffffb, 0x1, 0xf0000000, 0x43, 0x1}, {{}, 0xfffffffffffffffd, 0x20, 0x40, 0x7, 0x400}, {{}, 0xfffffffffffffffe, 0x4a, 0x20000000, 0x9, 0xffffffffffffffff}, {{}, 0xfffffffffffffffc, 0x6, 0x4, 0xffffffffe655e552}, {{}, 0xfffffffffffffffa, 0x23, 0x0, 0x6, 0x5}, {{}, 0x0, 0x28, 0x1, 0x4000100, 0xfffffffffffffff8}], 0xb19, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r1 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x1ea) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) 1.560920577s ago: executing program 1 (id=1307): syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d3452003000000000000000000004"]) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r1, &(0x7f0000001a00)=[{&(0x7f00000001c0)=""/249, 0xf9}, {&(0x7f0000000300)=""/97, 0x61}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000480)=""/175, 0xaf}], 0x4) 1.560675136s ago: executing program 5 (id=1308): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() read(r1, &(0x7f00000000c0)=""/110, 0x6e) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000001c0)={0xa, 0x4, 0xffffdfbd, 0xe6d8, "25589519000403007fd8f90d6400ffffbfff6aa0", 0x5, 0x4}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 1.56046932s ago: executing program 0 (id=1309): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0x7, 0x0, 0x8, 0x100200000, 0x8, 0x8, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x101, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x8000000000000001], [0xfffffe0000000002, 0x80000001, 0x1, 0x525, 0x6, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x8, 0x22, 0x5, 0xffffffbffffffff9}, {0x4, 0x4, 0xfffffffe, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x100009, 0xe7, 0x2000000000000002}, {0x7f, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x2, 0x3}, {0xfbfe, 0x6811, 0x6d9, 0x4}}}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() read(r1, &(0x7f00000000c0)=""/110, 0x6e) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000001c0)={0xa, 0x9, 0xffffdfc1, 0xffffff8e, "25589519000403007fd8f90d6400ffffbfff6aa0", 0x3, 0x4}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 1.201896228s ago: executing program 2 (id=1310): symlink(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000001c0)='.\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40100806) openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x1c) 1.201012654s ago: executing program 3 (id=1311): writev(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000006c0)='L9', 0x2}], 0x1) setrlimit(0x8, &(0x7f0000000000)={0x8, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='o', 0x1}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x7fffffff, 0x8, 0x6, 0x6, "893125326eaa157ce0a0df2fd922c72500d34c1e", 0x0, 0x2}) readv(r1, &(0x7f0000000600), 0x10000000000002a5) 1.147673347s ago: executing program 7 (id=1312): open(0x0, 0x100, 0x2) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xe2) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x7, 0x1, 0x71002}, {0x3, 0xe, 0x8, 0xfffffff9}, {0x80000101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0x8ce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x5, 0x14, 0x5910}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1d0, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0x9, 0x60, 0x7}, {0x6, 0xfffffffa, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x230003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) shmget$private(0x0, 0xc00000, 0xe, &(0x7f0000400000/0xc00000)=nil) 1.123706013s ago: executing program 4 (id=1313): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x33b9) r1 = open(&(0x7f0000000480)='./file0\x00', 0x800, 0x4ebfac6bbaf7900) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCCLR(r1, 0xc0a86b07, &(0x7f0000000200)={0x0, 0x10000, 0x0}) 1.068746553s ago: executing program 3 (id=1314): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xf, 0x4e, 0x2100007, 0x6, 0x1, 0x6, 0x5d7227f9, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x1, 0x2901f03c}, {0x1000008, 0xf86, 0x0, 0x9}, {0x401, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x3, 0x99}, {0xce1, 0x2, 0x4f8, 0x6d}, {0x6, 0x300, 0x55, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x7, 0x8001, 0x91b, 0x103}, {0x1ce, 0x10001, 0xf7, 0x1}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x80, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240), 0x0) 1.013732579s ago: executing program 6 (id=1315): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x4}, {0x3}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3}, {0x1, 0xfffffffd}, {}, {}, {0x1, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x2}, {}, {0x1, 0xfffffffc}, {0x2}, {}, {0x0, 0xffffffff}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]}) poll(0x0, 0x0, 0x0) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000240)={0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x20007606, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x2, './bus/file0\x00', [{[@v6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x8}, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x9, 0x40], 0x4000, 0x32}, {[@v6=@local={0xfe, 0x80, '\x00', 0x0}, @v6=@empty], [0x46, 0x1], 0x4}], {{0x248, 0x48, 0xfa, 0x7ff}, 0x6543, 0x409, 0xfff00000, 0xbe46, 0x8, 0x17, 0x16}, {{0x0, 0x7, 0x5, 0x5}, 0x8001, 0xc86, 0x1000a, 0x2, 0x801, 0xf0}, @v4=@multicast1, 0x4, 0xb, 0x2, 0xf23f, 0x6, [[0xfffffff7, 0x7], [0x2, 0x34c]], [[0x7, 0x401], [0x9]], 0x9, [0xe, 0x78], 0x1, 0x2, 0x4, 0x0, 0x0, 0x40, 0xb, 0x83, 0x5, 0x8, 0x1, 0xce57}}) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, "210d0000000200000006000000000200007fffff", 0x7effdffe}) 998.529224ms ago: executing program 2 (id=1316): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0xfffffff8, 0x6, 0xfffff966, 0xffffff90, "08955c1cfac164e20a070e00000009ffe600", 0x4000000, 0x2}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1) 939.350107ms ago: executing program 4 (id=1317): setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1, &(0x7f0000000080)=0x2, 0x4) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0x101, 0xfffffffe, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x4, 0x200}, {0x42, 0x8, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x14, 0xe}, {0xffefffff, 0xe2b4, 0x40000003, 0x6}, {0x4, 0x8a, 0x410001, 0x1ff}, {0x1e2, 0x400fff9, 0x927c, 0x7}, {0x16, 0x25, 0x9, 0x2d0b}, {0x3, 0x2, 0x80000001, 0x408}, {0x29a71718, 0x6, 0xfff, 0x2579}, {0x0, 0xf8f, 0x8}, {0xfffffffd, 0x800bd3d, 0xf778, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f0000000040), &(0x7f0000000280), 0x0, 0x0) 863.97017ms ago: executing program 7 (id=1318): socket$inet6(0x18, 0x3, 0x2) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000500)={0xffffff89, 0x1, 0x407, 0xffffff89, "08d095190000a1ecd8f90deaf12f9ef26570ec00", 0x80001, 0x1000}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 669.220182ms ago: executing program 3 (id=1319): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="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", 0xfffffdaf) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) kqueue() open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x104) r1 = socket(0x2, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) execve(0x0, 0x0, 0x0) 663.69224ms ago: executing program 0 (id=1320): r0 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r3, r3, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000780)={{r2, r3, r2, r3, 0x8f, 0x1a00, 0x0, 0x0, 0x8}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x8}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semctl$GETNCNT(r0, 0x0, 0x3, 0x0) 553.107966ms ago: executing program 5 (id=1321): open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) setgroups(0x0, 0x0) r0 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setuid(0xee01) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) 440.314485ms ago: executing program 6 (id=1322): kqueue() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80, 0x83) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x101) select(0x40, &(0x7f0000000280)={0x9, 0x5c4, 0x7, 0x8, 0x0, 0x2, 0x7}, &(0x7f00000001c0)={0x7f, 0x89, 0x100000004, 0x9, 0x6, 0x0, 0x7fffffffffa, 0x5}, 0x0, 0x0) 432.323602ms ago: executing program 1 (id=1323): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x36, 0x7, 0x7}, {0x40, 0xf0, 0xff, 0x20}, {0x6, 0x7f, 0xb6, 0xfffff802}]}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="91287eada80000000000000000000000000000f3006b1ba6f6164b6d676fce18a2fb8472a92d3721cb0a9613bb7962bef781e950a5e9525289e1b98aa1443d9ee817940aebabbe37aa4f67fb14561122819aeb7183a7feb8621d33f23bab6fcba74c06aa5eb4cb0fc0244a059c9f6ae3ea86d87692a64681c3ca6e3231a576ae2d5c81a6", &(0x7f0000000000)=0x84, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 385.120766ms ago: executing program 0 (id=1324): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) chmod(&(0x7f00000002c0)='./file0\x00', 0x3db) setuid(0xffffffffffffffff) connect$unix(r1, &(0x7f0000001ec0)=@file={0x9, 0x1, './file0\x00'}, 0xa) 323.96402ms ago: executing program 4 (id=1325): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) r0 = socket(0x11, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000700)={{&(0x7f0000000040)=@in, 0x10, &(0x7f0000000600)=[{&(0x7f0000000200)=""/199, 0xc7}], 0x1, &(0x7f0000000680)=""/103, 0x67}, 0x8}, 0x38, 0x40, &(0x7f0000000740)={0x8, 0xf393}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf5", 0xa) write(r1, &(0x7f0000000080)="d99aca", 0x3) 252.216989ms ago: executing program 1 (id=1326): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f0000000200)=0x46) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000340)="5790", 0x2}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r1, &(0x7f0000001640)=""/225, 0xe1) 133.145233ms ago: executing program 2 (id=1327): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x80000000}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x80}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) r1 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000001c0)={0xa, 0x9, 0xffffdfc1, 0xffffff88, "25589519000403007fd8f90d6400ffffbfff6aa0", 0x3, 0x4}) ioctl$VNDIOCSET(r0, 0x44946472, &(0x7f0000000540)={0x0, 0x0, 0x0}) 131.812423ms ago: executing program 0 (id=1328): r0 = semget$private(0x0, 0x4, 0x590) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x34, 0xffff, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x1}) setgid(0xffffffffffffffff) mknod(0x0, 0x2000, 0x450a) setgroups(0x0, 0x0) semop(r0, &(0x7f0000000080)=[{0x1, 0x0, 0x800}, {0x2, 0x7, 0x800}, {0x0, 0xf7a}, {0x2, 0x3, 0x1000}], 0x4) setuid(0xffffffffffffffff) semctl$GETALL(r0, 0x0, 0x6, 0x0) 62.97829ms ago: executing program 7 (id=1329): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x40000009}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x80004f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x100}, {0x1ce, 0x10001, 0xf7, 0x3}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x407, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000300)="b100050300000400000000b107000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443842102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c230000a37f50b60900000008e371a3f83400"/177, 0xb1, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1330): mlock(&(0x7f00004db000/0x1000)=nil, 0x1000) r0 = semget$private(0x0, 0x4, 0x0) setresuid(0x0, 0xee01, 0xee00) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x12}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xc0) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) semop(r0, &(0x7f0000001540)=[{0x3, 0x4171, 0x1000}, {}, {0x2, 0xa230, 0x1800}, {0x3, 0x9}], 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code Connection to 10.128.0.167 closed by remote host. pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 cP${×âðàV)»ÏÇRlo0: can't handle af0 pppx: unable to set addresses for pppx1, error=17 uvn_flush: obj=0xfffffd80663c36f0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! uvm_fault(0xffffffff83a69c28, 0xffff800029ee6000, 0, 2) -> e kernel: page fault trap, code=2 Stopped at kcov_remote_enter+0x122: movq $0,0(%rcx) TID PID UID PRFLAGS PFLAGS CPU COMMAND *182233 62053 0 0x2 0 0 syz-executor kcov_remote_enter(0,ffff80002a79f190) at kcov_remote_enter+0x122 timeout_run(ffffffff838a1da0,ffff80002a736338) at timeout_run+0xdf softclock_process_tick_timeout(ffff80002a736338,0) at softclock_process_tick_timeout+0x230 softclock(0) at softclock+0x152 softintr_dispatch(0) at softintr_dispatch+0xf9 dosoftint(0) at dosoftint+0x48 Xsoftclock() at Xsoftclock+0x27 buf_get(fffffd80098715e8,65560,4000) at buf_get+0x5de getblk(fffffd80098715e8,65560,4000,0,ffffffffffffffff) at getblk+0x146 bread(fffffd80098715e8,65560,4000,ffff80002a7f19f0) at bread+0x45 ffs_update(fffffd806dbd6f00,0) at ffs_update+0x198 ufs_inactive(ffff80002a7f1ab0) at ufs_inactive+0x2de VOP_INACTIVE(fffffd80774f62d0,ffff80002a779238) at VOP_INACTIVE+0xfb vput(fffffd80774f62d0) at vput+0xdc end trace frame: 0xffff80002a7f1b90, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a69c28, 0xffff800029ee6000, 0, 2) -> e ddb>