last executing test programs: 10.728998009s ago: executing program 1 (id=4271): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) clock_gettime(0x0, 0xfffffffffffffffe) ioctl$TIOCSETA(r0, 0xc4504441, &(0x7f0000000000)={0x800, 0xffff002f, 0xe9, 0x7ffffffd, "861be2f80000800ab0eb00008000", 0x10008000, 0xb}) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80, 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x81, 0xfc, 0xc, 0xf87}, {0x54, 0xf5, 0x7, 0x200}, {0x6, 0xa, 0xe, 0x4}]}) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[]) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0xfffffff7, 0x5, 0xffffdf82, 0x200, "08ed95990000000000000000ffffffffffffffe6", 0x7, 0xb7}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)='\x00', 0x1605}], 0x1) sysctl$hw(&(0x7f0000000640)={0x6, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) 10.502054302s ago: executing program 7 (id=4277): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f00000003c0)={'./file0\x00', 0xffffffff, 0xc, 0xc}) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2cff) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 10.466692666s ago: executing program 7 (id=4278): execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x1, 0x28, 0x64, 0x3, 0x6, 0x70, 0x0, @broadcast, @broadcast}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x1, 0x9}}}}}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r2, 0x8020699f, &(0x7f00000001c0)) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x10205b1a) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000340)) bind(0xffffffffffffff9c, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./bus\x00', 0x1000, 0x1) 10.46632158s ago: executing program 1 (id=4279): mkdir(&(0x7f0000000180)='./file0\x00', 0x25) setreuid(0x0, 0xee01) chdir(&(0x7f0000000140)='./file0\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='W\x00') 10.460197372s ago: executing program 1 (id=4281): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1ff}) r1 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x1510, r1) setuid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540), 0x1000000000000133, 0x0}, 0x42) munmap(&(0x7f0000000000/0xa000)=nil, 0xa000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ftruncate(r0, 0x1ff) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x4}, 0x4, 0x0, 0x0, &(0x7f0000000080)="0dc2504faa31b513ce7b118d2cde4b373862f244113b7989dc44ba4a69ea8088e3648a04822c94c3bfc06f18b28186a9e2dae79bb52f1ba7fbf3d4887b46", 0x3e) ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000040)=0xbd08) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0xf0f7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf6f33b96ce394412, 0x10e}, 0x2, 0x8, 0x1}) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x7fff}, {0x0, 0x2ff}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000040)="ee28c956ddd56a1508666019ac14d569407c6ed20600618420aef617be000500d4b38311001b000000000000", 0x2c) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4301) 5.747862784s ago: executing program 7 (id=4289): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000000)=0x7fff) ioctl$BIOCGETIF(r0, 0x4010427e, 0x0) 5.736200976s ago: executing program 1 (id=4291): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}]}) r0 = shmget$private(0x0, 0x3000, 0x602, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pread(r1, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) r2 = socket(0x18, 0x3, 0x0) setsockopt$sock_timeval(r2, 0xffff, 0x1006, 0x0, 0x0) 5.50340704s ago: executing program 7 (id=4292): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504441, &(0x7f0000000000)={0x800, 0xffff002f, 0xe9, 0x7ffffffd, "01af9b1977000000d0fb2cc46001a83a00", 0x10008000, 0xb}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x1, 0x2, 0x7fffffffffffffff, 0x2000200000001}) 5.446291904s ago: executing program 7 (id=4296): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) r1 = msgget$private(0x0, 0x0) setuid(0xffffffffffffffff) msgsnd(r1, 0x0, 0x0, 0x800) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000000)=0x7fff) ioctl$BIOCGETIF(r0, 0x4010427e, 0x0) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2, 0x168) readlinkat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000009c0)=""/4096, 0x1000) 4.728506684s ago: executing program 7 (id=4301): syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[]) setrlimit(0x8, 0x0) r0 = syz_open_pts() close(r0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000180)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082f9740f62f49ead69c9b3b32c84f8d320018983cea251ec1a2350c127dcdf7c69e1f0e8247ea3b5df5b16134f032c75405a000048044f2c0495f1496131b46051a74f58c9fcbec9fd0312aa24f63eb91489a05c8cf36b67310f648b950e7e7ca075ed83ed454a949c585f359084bd96d93a33c82ae1124227ed69ab8942a9ab7e", &(0x7f0000000080)=0xfeba, 0x0, 0x0) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, &(0x7f0000000040)={0x9, 0x2, 0x1, 0x2, "cd00220004000000000000000000000000008000", 0x40048003, 0x6}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x3) 4.726759255s ago: executing program 1 (id=4304): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffdc9, &(0x7f0000000680)=""/100, 0x64}, 0x80003fae}, 0x10, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000080)={0x0, 0x4}, 0x10, 0x400) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2, 0x0, {[0xd, 0x1, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0xdf5a, 0x0, 0x5, 0x2eff, 0x1ff, 0x3, 0xffffffffffffffff, 0xffffffffffffffdf, 0x8000000, 0xa8, 0x2, 0xce7], [0xfffffffffffffffe, 0x1, 0xfffffffffffffffb, 0x8000ffffffff, 0x2, 0x7b99, 0x5, 0xb, 0x1], [0x6, 0x2, 0x40000000, 0x3, 0xfffffffffffffffc, 0x11003, 0xfffffffffffffffe], [0x2000000, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x2, 0xffffffff, 0x0, 0x7d06}, {0xfffc, 0x7, 0x4, 0x2}, {0x1, 0x1, 0x5bea, 0x814}, {0x9, 0x5, 0x7, 0x80000001}, {0xc, 0x6, 0x0, 0x808}, {0x400b, 0x2000, 0x40000, 0x7}, {0x1, 0x20000, 0x4, 0x8}, {0x5d74, 0x2, 0x1, 0x4}], {0x2000, 0x4, 0x10000, 0x4}, {0x0, 0x0, 0x3, 0x9}}}) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{{r2}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, 0x0, 0x5, 0x0) kevent(r2, 0x0, 0xfffffffb, 0x0, 0x1, &(0x7f0000000340)={0x1, 0x5}) kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) close(r0) mknod(&(0x7f00000000c0)='./file0\x00', 0x118a, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="ed", 0x1) recvmmsg(r5, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/169, 0xa9}], 0x1, 0x0}}, 0x10, 0x2040, 0x0) shutdown(r5, 0x2) r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) r7 = socket(0x1c, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2000, 0x4, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @generic="179d64ca430bb096c6832cde18679e29dba3ef488e11ee14"}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2008, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) syz_emit_ethernet(0x4b, &(0x7f00000003c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x3, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @generic="71c295e41a302e1dc409fe04aa28840321369c6cb20ae2ece030bab6414e843b932d17d09dd5cf0c11"}}}}) ioctl$VMM_IOC_INTR(r6, 0xca605601, &(0x7f0000000040)={0x2}) close(r5) close(r4) r8 = getppid() fcntl$setown(r3, 0x6, r8) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x21, 0x0, 0x2e) ioctl$WSKBDIO_GETMAP(r3, 0xc010570d, &(0x7f0000000080)={0x4, &(0x7f0000000140)=[{0x8, 0x0, 0x0, 0x10, 0x6}, {0x100, 0xfffd, 0x0, 0xfff, 0x401}, {0x3, 0x6, 0xfffe, 0x7fff, 0xc}, {0x401, 0x0, 0x465e, 0x3, 0x5}]}) fcntl$setown(r3, 0x6, r8) 2.75276104s ago: executing program 6 (id=4323): r0 = shmget$private(0x0, 0x3000, 0x600, &(0x7f0000ffa000/0x3000)=nil) setgroups(0x0, 0x0) setgid(0xffffffffffffffff) setuid(0xee01) r1 = socket(0x2, 0x3, 0xff) connect$unix(r1, 0x0, 0x0) write(r1, &(0x7f0000000240)="14bdfa5d1d34e2", 0x7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x9, 0x9}, 0x2) shmat(r0, &(0x7f00004f3000/0x4000)=nil, 0x1000) 2.254154027s ago: executing program 1 (id=4329): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) ioctl$WSKBDIO_GETMAP(r2, 0x400474c4, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000007c0)='y', 0x1}], 0x1) syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x3) 2.253685845s ago: executing program 0 (id=4330): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x77f, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ad, 0x10005, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x108, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x8, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0xa000000, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a76, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71f17, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x7549, 0x3, 0x4, 0x6, 0x5}]}) 2.253365431s ago: executing program 2 (id=4331): ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504441, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x1, 0x2, 0x7fffffffffffffff, 0x2000200000001}) 2.253185891s ago: executing program 3 (id=4332): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffbfffffffffffd, 0xffffffffffffdfff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x400006001000003) r1 = open(0x0, 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x82, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r2, 0x40086475, &(0x7f0000000500)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$TIOCSETA(r0, 0xc4504445, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x34}) 2.252255264s ago: executing program 6 (id=4334): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffbfffffffffffd, 0xffffffffffffdfff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x400006001000003) r1 = open(0x0, 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0xe}, {0x401, 0x200326, 0x2900, 0x207}, {0x82, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0xffffffd0, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0xb, 0x6}, {0x0, 0x1, 0x2, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r2, 0x40086475, &(0x7f0000000500)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$TIOCSETA(r0, 0xc4504445, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) 1.972276101s ago: executing program 2 (id=4335): syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @empty, [], {@ipv4={0x8035, {{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x6, @remote={0xac, 0x14, 0x0}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x7, 0xfff, 0x10001, 0xbd, 0x7759}}}}}) 1.972095439s ago: executing program 2 (id=4336): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x803, 0x3f7, 0xffff, 0x200492, "084880fa870000bdda0988d11554e90d6602ff07", 0xb6, 0x3}) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) getrlimit(0x3, &(0x7f0000000140)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="d91ec98a281db7a7e0a14854d4046e5be33784c228e40d869d", 0x19}], 0x1) 1.755404755s ago: executing program 6 (id=4338): r0 = getpid() r1 = open(&(0x7f0000000100)='./file0\x00', 0x615, 0x61) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) setgid(0xffffffffffffffff) setrlimit(0x7, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa280000fed38d5bf3a80b98000000ff0200000000000000000000000000013c000638679cdfe5596d447c000000000502000205020c9bf4947907b20000000000000000"]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x18, 0x1, 0x0) sysctl$kern(&(0x7f00000001c0)={0x1, 0x49}, 0x9, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$unix(r1, &(0x7f0000001540)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00000002c0)=[{&(0x7f0000000240)="29a5a685a13b2049f8312d5f5db984fc7a8f602964385e35a906bdcce6d19a21bebc714a0c61716066d903617f45340f6108792dd0951edb5ce906f3b2070ad128b463f71ee887aeeec3e367c04c5fa2a303074d8d60b9c08cb8d6de83dd2c049184abdc310cc5a9be318c7e2b389c25", 0x70}, {&(0x7f0000000340)="86062ddabdeb36493e0c2157a60ad9100c0c0f1d190f4cf34a92b850132155b263fcfb3f97e63d790e6c2c66ada09695b5e87c11348d6faf9c4e28cfb53a01487164afa37080220995de182dd50b0aa19ec2ad3f4ab31ac80c5b93c805c1ef5835c8b18526ad6a81c43b9f0148e1251b18e3263be7df357cb814d976150aa117b64c6d309c3bace0f1b3180e94a27456", 0x90}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f00000001c0)="ef29e6acd36eb4d34174857cdf09bbfe9f4b75656e8bf19a12552650addf501b2d1eefff9f0001", 0x27}], 0x4, 0x0, 0x0, 0x7}, 0x20e) 1.751304968s ago: executing program 0 (id=4339): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x3, 0x4}]}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() sysctl$net_inet6_ip6(0x0, 0x0, &(0x7f00000001c0)="2a1b", 0x0, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) recvmmsg(r2, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0, 0x44}}, 0x10, 0x2, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/14, 0xe}], 0x1000000000000027) 1.749699549s ago: executing program 5 (id=4340): mkdir(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 64) r0 = getpid() (rerun: 64) open(&(0x7f0000000100)='./file0\x00', 0x615, 0x160) setgroups(0x0, 0x0) (async, rerun: 64) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setrlimit(0x1, &(0x7f0000000180)={0x1fe, 0x95f}) (async) setgid(0xffffffffffffffff) r1 = kqueue() kevent(r1, 0x0, 0x39b, 0x0, 0x200005, &(0x7f0000000340)={0x78, 0xffffffffffffffff}) (async) r2 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) open$dir(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8) symlinkat(&(0x7f0000000480)='./file0\x00', r2, &(0x7f0000000180)='./file1\x00') (async, rerun: 64) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 64) mkdirat(r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)=""/239, 0xef}], 0x301, 0x0}, 0x40) (async) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000240)="0007b51940351e8748", 0x9}], 0x1) (async) fcntl$dupfd(r1, 0x0, r5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendto$unix(r5, &(0x7f0000000040)='4', 0x1, 0x4, 0x0, 0x0) (async) write(r5, &(0x7f0000002600)="7cc97585253a5126a4ac0678c6d790b6c33b3e6e763c38371579343e19562401b7b74f0055ce1abc9e74072d11b74b65d267fefb275700f04cc1f8f490e5bb72db73bf3b59d1ae962bb0e2c9b3a30412087b7513d03b26bbcb131156c5b601d726737abaed6fc4125089b530cd1135475f8fb9431d3b5f1c987229bc588ee7fdc124c69fc4f8337a514e971c8b2da6c7bb34732e903bd7aa1143b450bd07e39bf8c1a49d7d5bff56c0c51ac6983a1c1820f7b3ae7e9d9e93525f7dcf8e322b9dbe76baa19915307b384bf3afecbab8a53cf1c3162610d96adc5a602165529e0406a344ac3058", 0xe6) (async, rerun: 64) unlink(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (rerun: 64) chown(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) 1.255302968s ago: executing program 5 (id=4341): sysctl$net_inet6_ip6(0x0, 0x0, &(0x7f00000001c0)="2a1b", 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) poll(&(0x7f0000000080), 0x1, 0x1) sendto$unix(r0, &(0x7f0000000180)="b1000504600000000000000007000000331c13fecea10500fef96ecfc72fd3357ae320a77bff0100000000000005ae04be38164991f7c8cf5f882b297be1aa5b2394cf7950f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8afa7d9f6642102410000720fd4d73f0b70c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfb70900000008e371a3f8343712051eadb71d89e000040781e4b2ffe000ff00", 0xb1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040)={0x40000002, 0x8}, 0x10) r1 = socket(0x6, 0x4, 0x0) recvmmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0, 0x44}}, 0x10, 0x2, 0x0) setitimer(0x1, &(0x7f0000000240)={{0x7, 0x2}, {0x9, 0x2b}}, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$TIOCSETA(r2, 0xc444443a, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb17a926cc9795a6b47c1d1", 0x401}) r3 = kqueue() openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0x7ff}, {}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x2}, {0x3}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x0, 0x40}]}) r4 = socket(0x18, 0x3, 0x3a) setsockopt(r4, 0x29, 0x6c, 0x0, 0x0) connect$unix(r4, &(0x7f0000000280)=@abs={0x0, 0x0, 0x3}, 0x8) semctl$GETPID(0x0, 0x16f92a70d8f97e07, 0x4, 0x0) kevent(r3, &(0x7f0000000000), 0x96, &(0x7f00000003c0), 0xfffb4161, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETA(r5, 0xc0104451, &(0x7f0000000740)={0xc635, 0x408, 0x3fc, 0x2000, "0000000000fb000000000000b34445f0388a19a0", 0x33c3300a, 0x2}) open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) 1.254698127s ago: executing program 3 (id=4342): pipe(0x0) syz_open_pts() writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000e40)="98b3cb60fb635b491bbbec01601ab1921d9405ceb6c16a4196afc5daa51bb48d2055cfb9d8b43a4a00d3c32942b4ce4cac4de58bb41799103b2875d3237dc3fae5beeaf4133619a3c5bb62a6b92617f04ec1d91e913b8900ea1d010df7f5b7c327cae1566c67836c8de642b731ff4792db1e5c89f9d1b773755da733de26141a4f3205308dacb4df311c819dc3539cab66b5b3b59aca760f81c13ae951cc47352397afc12b438d489a042b1474478dd8355d76890feee6643a02aab506bf0b59cba40e94283b391868e1cf7d81cdc1a52ec69dc7667e5e7d098fd4ba6ba1589f9aba08af61df23", 0xe7}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) lchown(0x0, 0x0, 0x0) mprotect(&(0x7f00001b7000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100012d29fb000700000000098002005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xb863, 0x5, 0x2, 0x1}]}) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504406, &(0x7f0000000740)={0x0, 0x2, 0x102, 0xfffffffc, "97aa224ff1c14649ebb178926cc1c75a6b47c1d1", 0x4, 0x80007ffc}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x7b}, 0x2, &(0x7f0000000180)="bcdaddab98577f82317c53045c84dac518689abe645be128fc31d7ada127460092b81296b6498f375c64a54b9625471755c3164bafa5454f2030b9b5724de62aa4733c", &(0x7f0000000200)=0x43, &(0x7f0000000240)="1ca8c8a73ae4c73433e378aad9f36950216486d43b3f223900c35ec39f2f8d552ec9d6d72e6f667915428d642dbe935aa24c86553c5da2a05a1bd417a4a1738f513af34d955669f0e3caad02af33ea87bb00eadd812f87115205e2c28db45cf944b64d526095a204248cf01499d84bec4bcde29d8bb87cfecce436c5623802c8406bca4cc7fac249eb0161b7af63bb9167ad2525223b9db6c4cb", 0x9a) ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000300)={0xffffffff, 0x0, 0x2000000b, 0x94, "08ff000000000000000000005d00", 0x2, 0x9}) pipe(0x0) (async) syz_open_pts() (async) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000e40)="98b3cb60fb635b491bbbec01601ab1921d9405ceb6c16a4196afc5daa51bb48d2055cfb9d8b43a4a00d3c32942b4ce4cac4de58bb41799103b2875d3237dc3fae5beeaf4133619a3c5bb62a6b92617f04ec1d91e913b8900ea1d010df7f5b7c327cae1566c67836c8de642b731ff4792db1e5c89f9d1b773755da733de26141a4f3205308dacb4df311c819dc3539cab66b5b3b59aca760f81c13ae951cc47352397afc12b438d489a042b1474478dd8355d76890feee6643a02aab506bf0b59cba40e94283b391868e1cf7d81cdc1a52ec69dc7667e5e7d098fd4ba6ba1589f9aba08af61df23", 0xe7}], 0x1) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) lchown(0x0, 0x0, 0x0) (async) mprotect(&(0x7f00001b7000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100012d29fb000700000000098002005e00"}) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xb863, 0x5, 0x2, 0x1}]}) (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504406, &(0x7f0000000740)={0x0, 0x2, 0x102, 0xfffffffc, "97aa224ff1c14649ebb178926cc1c75a6b47c1d1", 0x4, 0x80007ffc}) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x7b}, 0x2, &(0x7f0000000180)="bcdaddab98577f82317c53045c84dac518689abe645be128fc31d7ada127460092b81296b6498f375c64a54b9625471755c3164bafa5454f2030b9b5724de62aa4733c", &(0x7f0000000200)=0x43, &(0x7f0000000240)="1ca8c8a73ae4c73433e378aad9f36950216486d43b3f223900c35ec39f2f8d552ec9d6d72e6f667915428d642dbe935aa24c86553c5da2a05a1bd417a4a1738f513af34d955669f0e3caad02af33ea87bb00eadd812f87115205e2c28db45cf944b64d526095a204248cf01499d84bec4bcde29d8bb87cfecce436c5623802c8406bca4cc7fac249eb0161b7af63bb9167ad2525223b9db6c4cb", 0x9a) (async) ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000300)={0xffffffff, 0x0, 0x2000000b, 0x94, "08ff000000000000000000005d00", 0x2, 0x9}) (async) 1.205177507s ago: executing program 3 (id=4343): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x4, 0x0, 0x0) (fail_nth: 1) 1.188275213s ago: executing program 3 (id=4344): munmap(&(0x7f0000e34000/0x1000)=nil, 0xffffffffdf1cbfff) socket(0x18, 0x3, 0x0) (async) r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x33, &(0x7f0000000040)="ebffcbff", 0x4) sysctl$vm_swapencrypt(&(0x7f0000000640), 0x3, &(0x7f0000000680)="3428da5e", &(0x7f0000000700)=0x4, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x2c, 0xf, 0x3, 0x9}, {0x6, 0x9, 0x1, 0xfffffff2}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x2c, 0xf, 0x3, 0x9}, {0x6, 0x9, 0x1, 0xfffffff2}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="441e38001149aa3d88cc0a387ecffcfcbaf2670fcadaae0d850b2646", 0x1c}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="441e38001149aa3d88cc0a387ecffcfcbaf2670fcadaae0d850b2646", 0x1c}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000280)="50041b0200c29e3e807447f80b78a5000000000000c967ec98df1eaef35996ef68bba5bcfb27e8c77696a2d6bea4aadba94dae006dbc0fb7b71a9a78a709c80426d86c7001185f08cc4cb8b442f96a3f5c2c739e", &(0x7f0000000000)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r3, &(0x7f00000000c0)="5a82c6c242aada7aac929952b552", 0xe) (async) write(r3, &(0x7f00000000c0)="5a82c6c242aada7aac929952b552", 0xe) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x0, &(0x7f0000000400)}) syz_emit_ethernet(0x1000e, 0x0) mknod(0x0, 0x2000, 0x637d) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f00000000c0)=0xdb1) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) getpgrp() 1.184513177s ago: executing program 3 (id=4345): r0 = openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000000)='<', 0x1) r1 = openat$diskmap(0xffffffffffffff9c, 0x0, 0x28000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) poll(&(0x7f0000000200)=[{r1, 0x1}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x40}], 0x4, 0x2) openat$vnd(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='c\x00') fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) socket(0x18, 0x3, 0x3a) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r2, &(0x7f0000000240)="000800000000ff", 0x7) 1.184234804s ago: executing program 5 (id=4346): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x1000000ff}}) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x13, 0x61, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) 982.270149ms ago: executing program 2 (id=4347): r0 = socket(0x1, 0x8000, 0x0) setsockopt(r0, 0x11, 0x4, 0x0, 0x0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000), 0xc) 981.605968ms ago: executing program 4 (id=4348): execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x1, 0x28, 0x64, 0x3, 0x6, 0x70, 0x0, @broadcast, @broadcast}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x1, 0x9}}}}}) ioctl$FIONREAD(r0, 0xc0106924, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r2, 0x8020699f, &(0x7f00000001c0)) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x10205b1a) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000340)) bind(0xffffffffffffff9c, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./bus\x00', 0x1000, 0x1) 980.337083ms ago: executing program 5 (id=4349): r0 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) setuid(0xffffffffffffffff) fchown(r0, 0x0, 0xffffffffffffffff) open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x4a) 979.558534ms ago: executing program 6 (id=4350): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x18, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa) mkdir(&(0x7f0000000080)='./file0\x00', 0xc) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 971.664216ms ago: executing program 2 (id=4351): ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504441, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x1, 0x2, 0x7fffffffffffffff, 0x2000200000001}) 970.6307ms ago: executing program 4 (id=4352): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TIOCSETA(r0, 0xc0044418, &(0x7f0000000740)={0x2f, 0x2, 0x2, 0x5, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x810}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105727, &(0x7f0000000040)={&(0x7f0000000000)=[{0x100, 0x4}], 0x1}) 755.630739ms ago: executing program 5 (id=4353): r0 = open(0x0, 0x80000000000206, 0x4ebfac6bbaf7949) rename(0x0, 0x0) writev(r0, 0x0, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x0) mmap(&(0x7f0000520000/0x3000)=nil, 0x3000, 0x4, 0x4010, r1, 0x1000) setsockopt$inet_opts(r2, 0x0, 0x1f, &(0x7f00000001c0), 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f0000012000/0x4000)=nil, &(0x7f000051f000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x1}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f00006c1000/0x2000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x1}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x8}, {&(0x7f0000015000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0x400000000000000}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000604000/0x3000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x9d}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x40003}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x40ac3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil}, {&(0x7f0000531000/0x2000)=nil, &(0x7f0000604000/0x2000)=nil, 0x2}, {&(0x7f000068f000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00006bf000/0x4000)=nil, &(0x7f0000010000/0x3000)=nil, 0x4}], './file0\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004800390787ffe"]) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) 754.146302ms ago: executing program 6 (id=4354): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x8) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f00000010c0), 0x210) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x1, 0x0, 0xe, 0x80}, {0x401, 0x200326, 0x2800, 0x7}, {0x2, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x9}, {0x2, 0x82, 0x5, 0x9}, {0x6, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xa, 0x6}, {0x800, 0x9, 0x8, 0xb}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0x20000c, 0x7, 0x1, 0xfffffffd}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet_tcp(&(0x7f0000000bc0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000c80), 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x8) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f00000010c0), 0x210) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x1, 0x0, 0xe, 0x80}, {0x401, 0x200326, 0x2800, 0x7}, {0x2, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x9}, {0x2, 0x82, 0x5, 0x9}, {0x6, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xa, 0x6}, {0x800, 0x9, 0x8, 0xb}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0x20000c, 0x7, 0x1, 0xfffffffd}, {0x0, 0x1, 0x1002, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000bc0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000c80), 0x0) (async) 753.177279ms ago: executing program 2 (id=4355): r0 = open(0x0, 0x80, 0x2a) r1 = msgget$private(0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0x7, 0x6}, {0x2, 0x9, 0x5, 0x1}, {0x9e, 0x0, 0x1, 0x86}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000380)="50df204f91d2d3de5f3db101002000245f238aec00", &(0x7f0000000000)=0x15, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[]) msgrcv(r1, 0x0, 0x0, 0x0, 0x800) msgrcv(r1, &(0x7f00000012c0)={0x0, ""/190}, 0xc6, 0x0, 0x800) close(0xffffffffffffffff) select(0x0, 0x0, 0x0, &(0x7f0000000cc0)={0xffff, 0x3, 0x0, 0x7, 0x8, 0x8031, 0x7, 0x4}, 0x0) ioctl$VNDIOCSET(r0, 0x80184404, 0x0) ioctl$VNDIOCSET(r0, 0x80044403, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) readv(r0, 0x0, 0x0) faccessat(r0, &(0x7f0000000040)='./bus\x00', 0x10, 0x1) 505.559258ms ago: executing program 4 (id=4356): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x77f, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ad, 0x10005, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x108, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x8, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0xa000000, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a76, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71f17, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x7549, 0x3, 0x4, 0x6, 0x5}]}) 468.93709ms ago: executing program 0 (id=4357): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000a, &(0x7f0000000000)='v', 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100061300", 0x8) 463.25584ms ago: executing program 0 (id=4358): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffbfffffffffffd, 0xffffffffffffdfff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x400006001000003) r1 = open(0x0, 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x82, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r2, 0x40086475, &(0x7f0000000500)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$TIOCSETA(r0, 0xc4504445, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x3400}) 462.836027ms ago: executing program 5 (id=4359): r0 = socket$inet(0x2, 0x3, 0x3) (async) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async, rerun: 32) chmod(&(0x7f0000000040)='.\x00', 0x35e) (rerun: 32) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYRES32=r1, @ANYRES32=r0], 0x10, 0x8}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (rerun: 32) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) chflagsat(r5, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) (async) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x3b}) r6 = socket$inet(0x1e, 0x3, 0x0) getpeername(r6, 0x0, &(0x7f0000000040)) (async) r7 = socket(0x18, 0x1, 0x0) ioctl$FIOSETOWN(r7, 0x8004667c, &(0x7f0000000280)=0x1) (async, rerun: 32) sendmmsg(r2, &(0x7f0000001440)={0x0, 0x1}, 0x10, 0x0) (rerun: 32) recvmsg(r3, &(0x7f0000000380)={&(0x7f0000000000)=@un=@abs, 0x8, &(0x7f0000001480)=[{&(0x7f0000000100)=""/166, 0xa6}], 0x1, &(0x7f0000000500)=""/7, 0x7}, 0x821) (async) setuid(0xee01) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa) (async) preadv(r1, &(0x7f0000000440)=[{0x0}], 0x1, 0x7fffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32) execve(0x0, 0x0, 0x0) (async, rerun: 32) getsockopt(r0, 0xffff, 0x2, &(0x7f0000000040)=""/69, &(0x7f00000000c0)=0x45) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000100)='\x00', &(0x7f0000000200)='\x00', &(0x7f00000002c0)='\x00\x86(\x87u\xc02\xaa6\x1c\xe0\xb1', &(0x7f0000000480)='\x00\x86(\x87u\xc02\xaa6\x1c\xe0\xb1', &(0x7f00000003c0)='\xc3\x00'], &(0x7f0000000240)=[&(0x7f0000000180)='.]\\-:\x9f\x00', &(0x7f00000001c0)='{\x00', &(0x7f0000000280)='\x00\x86(\x87u\xc02\xaa6\x1c\xe0\xb1']) (async) r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$TIOCSETA(r9, 0xc2084415, &(0x7f0000000380)={0x345c, 0x8094c, 0x202, 0x0, "000059f0779d000000000100", 0x8}) (async) r10 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) ioctl$FIONREAD(r10, 0x4004667f, &(0x7f00000004c0)) 251.444043ms ago: executing program 4 (id=4360): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x201, 0x7f}, {0x3, 0x5, 0x8007, 0x7}, {0x401, 0x9, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8, 0x1000, 0x4}, {0x400001cc, 0x10001, 0xc, 0x3}, {0x6, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffff7, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000240)=@in, 0xc, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000480)=""/71, 0x47}], 0x4, &(0x7f0000000540)=""/28, 0x1c}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000028c0), 0x12, 0x0) poll(0x0, 0x0, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) listen(r1, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r3, 0xffff, 0x1025, 0x0, 0x0) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x3}, 0x4d) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x2, 0x8}, {0x40, 0xf, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffffffe}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r4, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) 221.08574ms ago: executing program 0 (id=4361): sysctl$vm(&(0x7f0000000000)={0x2, 0xc}, 0x2, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) 220.630689ms ago: executing program 4 (id=4362): sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffeb0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x14) unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x8) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap(&(0x7f0000283000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8) 213.149693ms ago: executing program 0 (id=4363): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x10a6, &(0x7f0000001840)=ANY=[@ANYRESDEC=r0]) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r1) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x5, 0x9) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xbf, &(0x7f0000000300)={@random="a17ca31d097e", @local, [], {@ipv4={0x800, {{0x21, 0x4, 0x1, 0x10, 0xb1, 0x65, 0x81, 0xd, 0x4, 0x0, @rand_addr=0x3, @empty, {[@timestamp={0x44, 0x48, 0x9, 0x3, 0x0, [{[@local={0xac, 0x14, 0x0}], 0xcd}, {[@multicast1], 0x3ff}, {[@remote={0xac, 0x14, 0x0}], 0x6}, {[], 0x3}, {[], 0x5}, {[@loopback], 0x800}, {[], 0xc}, {[@empty], 0x4}, {[@loopback], 0x9}, {[@multicast1], 0x7}]}, @end, @rr={0x7, 0x27, 0x5, [@empty, @broadcast, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @multicast2, @rand_addr=0x6, @broadcast, @rand_addr=0x847, @empty]}]}}, @tcp={{0x3, 0x1, r3, r4, 0x0, 0x0, 0x8, 0x58, 0x636, 0x0, 0x81, {[@nop, @timestamp={0x8, 0xa, 0x8, 0x7f}]}}, {"c1f02680da4a875e0ac669a4ac"}}}}}}) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7, 0x8017, 0x7fffffff, 0xb31, 0x1, 0x81ac, 0x10011, 0x10, [{0x0, 0x0, 0x4, 0x71002}, {0x6, 0xc, 0x8, 0x7f}, {0x100, 0x9, 0x400, 0x9}, {0x1, 0x5, 0x8008}, {0x404, 0x1, 0x2800, 0x401}, {0x6, 0xfffffffd, 0x3, 0x3}, {0x2, 0x401, 0x4f7, 0x6c}, {0x6, 0x803, 0x10000014, 0x8}, {0x2, 0x7f, 0x5, 0x5}, {0x140, 0x8001, 0x6, 0x4}, {0x8f, 0x7ffc, 0xc, 0x7f}, {0x2008, 0x9, 0x604, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x80000000, 0x80000001}, {0x7, 0x5, 0x9, 0x8}, {0x0, 0x3, 0x9, 0x88b0}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSRSIG(r2, 0x80044272, &(0x7f00000003c0)=0x4) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r5 = socket$inet(0x2, 0x3, 0xb) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @random="c27467433062", [{[], {0x8100, 0x6, 0x1, 0x1}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @empty, @local={0xac, 0x14, 0x0}, @remote, @broadcast}}}}) ioctl$TIOCSETA(r0, 0xcd504407, &(0x7f0000000740)={0xb6, 0xfc, 0x40, 0x7, "97000fa60000804c0900", 0x1, 0x56}) 211.82021ms ago: executing program 3 (id=4364): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x4) r2 = fcntl$dupfd(r1, 0xa, r0) ioctl$WSDISPLAYIO_SVIDEO(r2, 0x80045745, &(0x7f0000000080)) ioctl$KDSETMODE(r2, 0x20004b0a, &(0x7f00000000c0)) ioctl$WSDISPLAYIO_SBURNER(r2, 0x800c5751, &(0x7f0000000100)={0x0, 0x0, 0x3}) recvmsg(r1, &(0x7f0000000740)={&(0x7f0000000140)=@in6, 0xc, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000400)=""/81, 0x51}, {&(0x7f0000000480)=""/90, 0x5a}, {&(0x7f0000000500)=""/135, 0x87}], 0x7, &(0x7f0000000640)=""/225, 0xe1}, 0x2) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r4, 0xc1045763, &(0x7f0000000800)={0x8, [{0x1, 0xf}, {0x2, 0x4fd1}, {0x2, 0x40}, {0x1, 0x5}, {0x1, 0x80}, {0x1, 0x5}, {0x2, 0x10}, {0x3}, {0x1, 0x9}, {0x1, 0x48}, {}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x1c000000}, {0x1}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x5}, {0x2, 0x1}, {0x2, 0x56b7}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x8000}, {0x3, 0x5}, {0x3, 0x3}, {0x3, 0x5f}, {0x3, 0xffff}, {0x0, 0x9}, {0x3, 0x400}, {0x3}]}) ioctl$WSMUXIO_LIST_DEVICES(r4, 0xc1045763, &(0x7f0000000940)={0x3, [{0x2, 0x4}, {0x2, 0x3a8f80}, {0x2, 0x7fffffff}, {0x2, 0x7ff}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0x80000001}, {0x2, 0x5}, {0x2, 0x12}, {0x2, 0x6}, {0x2, 0xffffffff}, {0x1, 0x3}, {0x3, 0xb}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x451}, {0x1, 0x10000}, {0x1, 0x3ff}, {0x3, 0x6}, {0x3}, {0x3, 0x2}, {0x3, 0xac1}, {0x2}, {0x3, 0x3}, {0x3, 0xab14}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0xffff}, {0x2, 0x6}, {0x1, 0x8}, {0x3, 0xb9}, {0x2, 0x1000}]}) ioctl$TIOCDRAIN(r3, 0x2000745e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETMODE(r3, 0x40045714, &(0x7f0000000ac0)) r7 = open$dir(&(0x7f0000000b00)='./file0\x00', 0x2, 0x2) pipe(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000b80)=[{r6, 0x10}, {0xffffffffffffff9c, 0x60}, {r3, 0x8}, {r2, 0x4}, {r1, 0x100}, {r0, 0x100}, {r0, 0x20}, {r7, 0x82}, {r8, 0x4}, {r4, 0x20}], 0xa, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000c00)={@random="5e46dbfc131f", @random="7f9633402bed", [{[{0x88a8, 0x2, 0x1, 0x1}], {0x8100, 0x4, 0x1, 0x4}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @broadcast, @remote={0xac, 0x14, 0x0}, @empty, @remote={0xac, 0x14, 0x0}}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r10, 0xffff, 0x80, &(0x7f0000000c80)={0x80, 0x7}, 0x8) r11 = openat$tty(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80, 0x0) ioctl$TIOCSTSTAMP(r11, 0x8008745a, &(0x7f0000000d00)={0x6, 0x100}) execve(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000dc0)=[&(0x7f0000000d80)='/dev/wsmouse\x00'], &(0x7f0000001040)=[&(0x7f0000000e00)='/dev/tty\x00', &(0x7f0000000e40)='[(\'+]!+\x96-}!,/\x00', &(0x7f0000000e80)='/dev/ttyCcfg\x00', &(0x7f0000000ec0)='\x00', &(0x7f0000000f00)='\x00', &(0x7f0000000f40)='\x00', &(0x7f0000000f80)='[):@[\x00', &(0x7f0000000fc0)='\x00', &(0x7f0000001000)='/dev/ttyCcfg\x00']) ioctl$TIOCGFLAGS(r9, 0x4004745d, &(0x7f00000010c0)) r12 = accept(r5, &(0x7f0000001100)=@in, &(0x7f0000001140)=0xc) bind$unix(r12, &(0x7f0000001180)=@file={0x1, './file0\x00'}, 0xa) socket$inet(0x2, 0x0, 0x7) ioctl$WSDISPLAYIO_DELSCREEN(r3, 0x80085754, &(0x7f00000011c0)={0x8, 0x1}) ioctl$WSDISPLAYIO_GVIDEO(r2, 0x40045744, &(0x7f0000001200)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x4010, r4, 0x4) 211.55821ms ago: executing program 4 (id=4365): setgid(0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000b40)="7b029e2805018e45187c2acdd889f68bca9cecc37982c211a9f79fe61023d1d6315162bef6dea2b9436e2cf27bb21b0da37cce0cea029556748cbbd41c8c63b88fde3683298efdadf3", 0x49}], 0x1, 0x0, 0x0, 0x8}, 0xa) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$TIOCSETA(r0, 0xc4504444, &(0x7f0000000740)={0xe, 0x4, 0x8000, 0xd, "97a22200", 0xa, 0x9}) setgroups(0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xffff, {[0xfffffbfffffffff8, 0x0, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0xfffffffffffffffe, 0x4, 0x6, 0x4, 0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0xfffffffffffffffa], [0xfffffffffffffffa, 0x80000000, 0xf, 0x9c7, 0x5b, 0x1, 0x1fe, 0x0, 0x0, 0x2], [0x100000001, 0x2, 0x0, 0x0, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x20000004, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x6, 0x2, 0xfffffffc, 0x80}, {0x9, 0x5, 0x4, 0xffffffffffffffff}, {0x6, 0x2, 0x1000, 0x8}, {0x0, 0x2007, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0x2, 0x80000000, 0x6d5, 0x2}}}) r1 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) close(r1) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001540)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x27e) setuid(0xee01) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 0s ago: executing program 6 (id=4366): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x1000000ff}}) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x13, 0x61, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error vnd0: sloppy read from proc 27803 (syz-executor): blkno 0 bcount 185 pckbd_enable: command error pckbd_enable: command error vm_create: uvm_map failed: 12 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error load: 3.34 cmd: getty 29292 [ttyin] 0.01u 0.01s 0% 330k OpenBSD/amd64 (ci-openbsd-main-0.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error #!¾pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error vm_resetcpu: failed malloc(): allocation too large, type = 127, size = 6535087492 ‡]C™âpckbd_enable: command error vnd0: sloppy read from proc 45243 (syz-executor): blkno 0 bcount 185 vnd0: sloppy read from proc 49852 (syz-executor): blkno 0 bcount 185 vnd0: sloppy read from proc 75292 (syz-executor): blkno 0 bcount 185 vnd0: sloppy read from proc 83094 (syz-executor): blkno 0 bcount 185 pckbd_enable: command error vnd0: sloppy read from proc 89941 (syz-executor): blkno 0 bcount 185 pckbd_enable: command error vm_create: uvm_map failed: 12 vnd0: sloppy read from proc 62147 (syz-executor): blkno 0 bcount 185 denied attempt to set clock forward to 35184372091328 vnd0: sloppy read from proc 38358 (syz-executor): blkno 0 bcount 185 vnd0: sloppy read from proc 22564 (syz-executor): blkno 0 bcount 185 ×vnd0: sloppy read from proc 70760 (syz-executor): blkno 0 bcount 185 vnd0: sloppy read from proc 68002 (syz-executor): blkno 0 bcount 91 malloc(): allocation too large, type = 6, size = 64424509440 pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 6, size = 64424509440 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error cksum4: out of data pckbd_enable: command error lo0: can't handle af0 lo0: can't handle af0 pckbd_enable: command error lo0: can't handle af0 malloc(): allocation too large, type = 6, size = 64424509440 pckbd_enable: command error WARNING: thread `nfsio' (27109) exits with status -1 pckbd_enable: command error denied attempt to set clock back 4263431328 seconds pckbd_enable: command error denied attempt to set clock forward to 72058559662425800 WARNING: thread `nfsio' (434015) exits with status -1 WARNING: thread `nfsio' (341190) exits with status -1 WARNING: thread `nfsio' (377805) exits with status -1 WARNING: thread `nfsio' (323598) exits with status -1 WARNING: thread `nfsio' (125905) exits with status -1 WARNING: thread `nfsio' (389225) exits with status -1 WARNING: thread `nfsio' (338675) exits with status -1 WARNING: thread `nfsio' (45668) exits with status -1 WARNING: thread `nfsio' (262597) exits with status -1 WARNING: thread `nfsio' (25375) exits with status -1 WARNING: thread `nfsio' (317985) exits with status -1 WARNING: thread `nfsio' (344487) exits with status -1 WARNING: thread `nfsio' (97782) exits with status -1 WARNING: thread `nfsio' (116789) exits with status -1 WARNING: thread `nfsio' (366282) exits with status -1 WARNING: thread `nfsio' (264260) exits with status -1 WARNING: thread `nfsio' (506568) exits with status -1 WARNING: thread `nfsio' (470460) exits with status -1 WARNING: thread `nfsio' (363057) exits with status -1 WARNING: thread `nfsio' (129941) exits with status -1 pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 vm_create: uvm_map failed: 12 pckbd_enable: command error denied attempt to set clock back 4263431417 seconds pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error attempt to execute user address 0x0 in supervisor mode fatal page fault in supervisor mode trap type 6 code 10 rip 0 cs 8 rflags 10246 cr2 0 cpl 1 rsp ffff80002a733008 gsbase 0xffffffff8379eff0 kgsbase 0x0 panic: trap type 6, code=10, pc=0 Starting stack trace... panic(ffffffff833a0d67) at panic+0x1ba kerntrap(ffff80002a732f50) at kerntrap+0x2fb alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b 0(ffffffff83805cf0,fffffd806d06cf08,b2e3a6083c03dfc6, 0,fffffd806d06cf08,2aa) at 0 softclock_process_kclock_timeout(fffffd806d06cf08,0) at softclock_process_kclock_timeout+0x2a5 softclock(0) at softclock+0x179 softintr_dispatch(0) at softintr_dispatch+0xf9 dosoftint(0) at dosoftint+0x48 Xsoftclock() at Xsoftclock+0x27 acpicpu_idle() at acpicpu_idle+0x42e sched_idle(ffffffff8379eff0) at sched_idle+0x361 end trace frame: 0x0, count: 246 End of stack trace. dump to dev 4,1 not possible rebooting... SeaBIOS (version 1.8.2-google) Total RAM Size = 0x0000000080000000 = 2048 MiB CPUs found: 2 Max CPUs supported: 2 SeaBIOS (version 1.8.2-google) Machine UUID 860ebdd0-427f-2be6-5726-fd56b385017a found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f26e0: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Sending Seabios boot VM event. Booting from Hard Disk 0... >> OpenBSD/amd64 BOOT 3.67 boot> set $lines = 0 set: syntax error boot> set $maxwidth = 0 set: syntax error boot> show panic boot: illegal argument panic boot> trace boot> show registers boot> show proc boot> ps boot> show all locks boot> show malloc boot> show all pools boot> machine ddbcpu 0 machine: syntax error boot> trace boot> machine ddbcpu 1 machine: syntax error boot> trace