last executing test programs: 3.296581286s ago: executing program 0 (id=1): execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)=',O\x00'], 0x0) r0 = getthrid() r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x5, 0x80000000, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x44, 0x3efdd}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() r2 = syz_open_pts() ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000000080)=0x9) setpgid(r0, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000100)='./file0\x00', 0x2) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_pts() ioctl$TIOCGETD(r3, 0x4004741a, &(0x7f00000000c0)) open$dir(&(0x7f0000000100)='./file0\x00', 0x10, 0x2d2) 3.294791931s ago: executing program 2 (id=11): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x40) r2 = setsid() fcntl$setown(r1, 0x6, r2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x1c0, 0x43}, 0x6205, 0x2a3, 0x4, 0xc, 0x1, 0x0, 0x0, 0x401, 0x0, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffe}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4a}, 0x2, &(0x7f00000002c0)="71f99e3405ac0058bc5a91501db0a3288e5d0d3c19a39c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) write(r0, &(0x7f0000000140)="fd03a3732996abdaf67f9177036608c475452708e7e196f330d9a790beacf6c0e0f7b481b5e8ede8cb60855e8be70691543dd993d5d3ab2eaf6879febc11411c94c98ec52edbe174052695e79d314d5b142f778a1161e91f0e5698bad399c5df615a5139e8fbd6d187be2e14a951b32f501cf47034e8abcc193e4edee5e725273fece26149d642b90a10f0e67bc9edb6730dc58b350f44c6ce3b636bbea3dc3b2ea816f8bb8176dd29092fe650eb95a69405a5bdd0d8cc6adcab9f1a0e1ce37a37d388623f30bbc2f26e777d19f1d574cf388540a1bd9000261c098e5e75e21c77861fcb16842955101a80e9f4e6ef33fb79ec1d71bcddd66cacf704b85d3813e4a14266509c14af1fbda42f8d1243cc5f85cfc39addea9e8c57cd7e86c34d583d5c454df6aafa011610a3c467b9e575258560682e48e23c0af99a7ce73f9bf214019feaa2314879b6b823406729027d5fb6336bd8d82b109e1f53d9ed512b1b4471de", 0x163) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000380)={0x0, 0x0, r1, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000480)={&(0x7f0000000400)=[r3, r4, r5], 0x9, 0x3, 0x0, 0x0, 0x0, 0x140000}) unveil(0x0, &(0x7f00000003c0)='x\x00') select(0x40, &(0x7f0000000000)={0x1, 0x2, 0x4, 0x15, 0xf801, 0x8001, 0x8003, 0x3}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x3, 0x0, 0x247, 0x4, r2}) sendmsg(r6, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e4000000ffff000001"], 0xe4}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(0x0, &(0x7f0000000000)='r\x00') ioctl$DIOCSETDEBUG(r0, 0xc0044418, &(0x7f00000000c0)=0x9) 3.282231524s ago: executing program 5 (id=16): r0 = socket$inet6(0x18, 0x2, 0x0) ioctl$VMM_IOC_READREGS(r0, 0xc050756a, &(0x7f0000000340)={0xfffffffc, 0x0, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x200000000], [0x0, 0x0, 0x7], [{}, {}, {}, {}, {}, {0x4}]}}) sysctl$kern(&(0x7f0000000100)={0x1, 0x48}, 0x2, &(0x7f00000011c0)="71f91e5a", &(0x7f0000000000)=0x4, 0x0, 0x0) 3.180737638s ago: executing program 5 (id=17): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x10a) semop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x3, 0x0, 0x800}, {0x4, 0x2ff}], 0x2) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0x3, "ffffffffffff00000000000000000001", 0x7}, 0x1c) getsockname$inet6(r1, 0x0, &(0x7f0000000100)) ftruncate(r0, 0x108531) 3.168921633s ago: executing program 0 (id=19): r0 = shmget$private(0x0, 0x3000, 0x143, &(0x7f0000ffa000/0x3000)=nil) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @empty, [], {@ipv6={0x86dd, {0x5, 0x6, "2dc318", 0x8, 0x4, 0x2, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @loopback, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x7}, 0x5, 0xfffc, 0x0, 0x0, 0x1, 0x0, 0x800000800000000, 0x0, 0x20}) r1 = shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000) shmdt(r1) 3.148338353s ago: executing program 5 (id=23): sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x10) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x27}, 0x4, &(0x7f00000000c0)="0df8ab55ed8ec4eaa0c17ba03882ab59a5e504db058b998753d4001cf93e51e699e372081a35e94bdf7760adae25bc86aaaf33e51d7664508cfe2887ea101a6b2bca286d511856e8ad19f1ffe88f6c5a18c155f8acf93d49679850e9728154eb8905c4c563688006c8cda7942f8b9fe6204b51c7165a1937ecab15a4fa8110f3b651ca3cdd6e8f4ac36cb64c1da66fb7a9222f60a2f7c6ed2d3d1b94d5a5ee6421c57e3274d92e3209df023cd06e9d3ff3e2fe0eb09f4d6b166749f95d267fc07c90a98732a54098530453a089cd35ff8d963607360068b0e07349243523e8f758dbb9f47991d54908a2", &(0x7f00000001c0)=0xea, &(0x7f0000000200)='g', 0x1) 2.988458594s ago: executing program 0 (id=24): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000100)=0x7f, 0x4) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1, 0x78, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, r1, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x8200, 0x0, 0xfffc}, {"d695b8b099a99e2eaf99adf9e18274f94cfc7f4a371459a1c1d8649d6814dcebd427aba9a1c7dd0f3687a8d7a8ebadbd53b7b4d8c31af1224535fce5023e16be66c9764888b54cbdd8c8a16a7ae4fa3f"}}}}}}) r2 = syz_open_pts() r3 = kqueue1(0x4) kevent(r3, &(0x7f0000000040), 0x400, &(0x7f00000000c0)=[{{r2}, 0xffffffffffffffff, 0xc, 0x80, 0x339, 0x81}], 0xc6d, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shutdown(r0, 0x1) 2.98804317s ago: executing program 5 (id=25): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0xe000) r1 = accept$unix(r0, &(0x7f0000000180)=@file={0x0, 0x0, ""/85}, &(0x7f0000000200)=0x57) write(r1, &(0x7f0000000240)="b96abcf5ac7cffa09ea845315c0d853a145c542fcd58cacd3953f574fca261a82735d1b0794078017920c509ce5cda4c66257e6568b47ed0642bc1b05df1bc00cf58dffb725e752b5a31b8feac6428684988cd1aa496dcf8303efc0aca4354313b31074ac2bd8df132b2a7d3439d2528351c2f6d11293016b62b0e83182e28fd0c140d3d428db617187db8a0b09a7c9cdb79d35d3878cf533f884c60856086b0834a9bd7b7718c5bffe74ce6c425d806fedd83764a39f75560b493e109f96891db76624d42ab0a59763964", 0x9dd7e5a186b9ba79) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 2.9866599s ago: executing program 5 (id=29): r0 = fcntl$getown(0xffffffffffffffff, 0x5) kill(r0, 0xa) 2.763398717s ago: executing program 0 (id=30): setrlimit(0x5, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() open$dir(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0xe9) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)=""/251, 0xfb}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x2042, 0x0) r2 = syz_open_pts() close(r2) syz_open_pts() writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x4, 0xfffffff8, 0xac, 0x81, "02979b7c77d3c3c393b36b0816ef77f9d968842e", 0x6, 0x4}) write(r2, &(0x7f00000009c0)="24bdfa5d1d2873c63e35348295b299ab09dbd0734449c365d05ba166e2fea9aec43050006123339a72f47315", 0x2c) 2.762977619s ago: executing program 5 (id=31): sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x5, 0x0, 0x0, 0x0, 0xfffffff7) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r0 = syz_open_pts() getrlimit(0x6, &(0x7f0000000180)) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x2, 0x1000008, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x80000201}, {0x2, 0x8, 0x6, 0xfff}, {0x7, 0xfdfffffe, 0x7, 0x20001}, {0x2, 0xdf, 0xf}, {0x0, 0x7, 0xf11, 0xb}, {0x3, 0xffff, 0x80cf, 0x1}, {0x3, 0x800, 0x100, 0x5}, {0xffffffff, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8000000, 0x44cf, 0x800007}, {0x4, 0xc7ce, 0x800000, 0x5}, {0x401, 0x106, 0x92fb, 0x40}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x101, 0x1003}, {0x9be2, 0x8001, 0x6, 0x69}]}) poll(&(0x7f0000000000), 0x35, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffff6, 0x11, 0x40, 0x8, 0x80}, {{r1}, 0xfffffffffffffff6, 0x9, 0x80000000, 0xe, 0xfffffffffffffffb}], 0x8a8a, 0x0, 0x1, 0x0) close(r0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) sysctl$net_inet_ipip(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) 2.762720127s ago: executing program 32 (id=31): sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x5, 0x0, 0x0, 0x0, 0xfffffff7) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r0 = syz_open_pts() getrlimit(0x6, &(0x7f0000000180)) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x2, 0x1000008, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x80000201}, {0x2, 0x8, 0x6, 0xfff}, {0x7, 0xfdfffffe, 0x7, 0x20001}, {0x2, 0xdf, 0xf}, {0x0, 0x7, 0xf11, 0xb}, {0x3, 0xffff, 0x80cf, 0x1}, {0x3, 0x800, 0x100, 0x5}, {0xffffffff, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8000000, 0x44cf, 0x800007}, {0x4, 0xc7ce, 0x800000, 0x5}, {0x401, 0x106, 0x92fb, 0x40}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x101, 0x1003}, {0x9be2, 0x8001, 0x6, 0x69}]}) poll(&(0x7f0000000000), 0x35, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffff6, 0x11, 0x40, 0x8, 0x80}, {{r1}, 0xfffffffffffffff6, 0x9, 0x80000000, 0xe, 0xfffffffffffffffb}], 0x8a8a, 0x0, 0x1, 0x0) close(r0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) sysctl$net_inet_ipip(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) 2.762530078s ago: executing program 3 (id=32): r0 = socket(0x1, 0x1, 0x0) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000001880)={{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0}, 0x311}, 0x38, 0x1000, &(0x7f00000018c0)={0x7, 0x6}) sync() setpgid(0x0, 0x0) r1 = getsid(0x0) setpgid(0x0, r1) setsid() 2.553329839s ago: executing program 8 (id=33): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x0) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00') (async) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00') 2.551031715s ago: executing program 2 (id=38): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x50, 0xfff8}, 0xe, 0x2b1, 0x0, 0x0, 0x6, 0x800000000000013, 0x10001, 0x40}) (async) r0 = shmget$private(0x0, 0x3000, 0x552, &(0x7f0000ffa000/0x3000)=nil) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x7, 0x9, 0xffffffffffffff9c}) (async) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x11, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$AUDIO_MIXER_WRITE(r1, 0xc0144d01, &(0x7f0000000040)=@enum_ctrl={0x7, 0x1, 0x8}) (async) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 2.535395024s ago: executing program 8 (id=33): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x0) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00') (async) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00') 2.523437772s ago: executing program 3 (id=39): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/177, 0xb1}], 0x5a, 0x0}, 0x6b}, 0x38, 0x2, &(0x7f0000000940)={0x1, 0x5}) close(r0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0x2be00000000000, 0x1, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2eff, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x8000000, 0xaa, 0x2000000000002, 0xce7], [0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x8000ffffffff, 0xf9, 0x7b99, 0x201, 0x2000c, 0x6, 0x1], [0x2, 0xfffffffffffffffb, 0x40000000, 0x4, 0xffffffffffffffff, 0x10ffc, 0xfff7fffffffffffe], [0x3, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0x7d06}, {0xfffc, 0x7, 0x9, 0x2}, {0x10, 0x101, 0x1, 0x814}, {0x3, 0x7, 0x9, 0x80000004}, {0x10, 0x2, 0x0, 0x808}, {0x400b, 0x2003, 0x40000, 0x4}, {0x1, 0x20000, 0x4, 0xf6}, {0xfffd, 0x965, 0x3, 0xffffffff}], {0x2400, 0x8, 0x10000, 0x803}, {0x0, 0xfffffffc, 0x3, 0x2}}}) (async) r2 = kqueue1(0x4) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) (async) listen(r3, 0x1) (async) kevent(r2, &(0x7f0000000040), 0x400, 0x0, 0xffff, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0xf8, 0x401, {[0xfffefbfefffffff8, 0x21, 0x5, 0x0, 0x0, 0x1, 0x8, 0x100, 0x0, 0x1000000000002f01, 0x4, 0x3, 0x8, 0x4, 0x8000004, 0xa8, 0x20000000002, 0xce7], [0x1, 0x280000004, 0x58, 0x10000, 0x8, 0x7b97, 0x1fe, 0x2000406, 0x400], [0x41, 0xfffffffffffffffe, 0x40000000, 0x8000004, 0xffffffffffffffff, 0x40005, 0xfffffffffffffffe], [0x200000000000fd, 0x8, 0x100000401, 0x100000000, 0xffffffffffefffff, 0x5e3f8722], [{0x0, 0x2, 0x101, 0x7d06}, {0xf7fc, 0xfffffffc, 0x5, 0x3}, {0x6, 0xb, 0x5bea, 0x200000000814}, {0x3, 0x5, 0x9, 0x8000080000001}, {0xe, 0xfffffffe, 0x0, 0xa000000}, {0x4, 0x2003, 0xcc, 0x4}, {0x1, 0xf, 0x8, 0x8}, {0x0, 0x200965, 0x0, 0x1}], {0x1ffe, 0x1000001, 0x10002, 0x9}, {0x0, 0x8004009, 0x3, 0x8000000000000000}}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = socket(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) (async) getentropy(0xfffffffffffffffe, 0x0) (async) setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000000100)=0x7, 0x4) (async) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) (async) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x6}, 0x4, &(0x7f0000000100), 0x0, 0x0, 0x0) r5 = socket(0x18, 0x1001, 0x0) connect$unix(r5, &(0x7f0000000040)=@file={0x1, 0x1, './file0\x00'}, 0xa) (async) sendto$inet(r4, &(0x7f0000000140)="457a798326d4b81e45eeb97b91c9bd5b4d8d54545b3f5300094faa3c1fc28d6579d0e448c4a6bb3bc0774b118f6c1640c7b11a6a22d59e9fef52013e8b0fd969e3f55ebc4647ae3cc39c3bc73ae59770940bd2f75f8d604ecd9d8c31255634fedf1613477df6bad5ed80ebc5a01311fa05ecf950e70c2f79efce4e621a3e3fd18bfdd727eff87e586f0981eb1cb887ba21", 0xd5, 0x402, 0x0, 0x0) (async) open$dir(&(0x7f0000000080)='./file2/file0\x00', 0x20000, 0x106) (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/file0/..\x00') chdir(&(0x7f0000000080)='./file0/file0/..\x00') 2.520271769s ago: executing program 2 (id=41): r0 = socket$inet(0x2, 0x2, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000480)={0xf66b, 0x94bf, 0xfffbffff, 0x5ffbfb5d, "428f67177c7cfc4dff0000800000002100", 0x5, 0xfffffffd}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000001180)="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", 0x6b1}, {&(0x7f0000000180)="6670acbe8bd2c770bb5ae704683cbb40e73b2047133736af24012d72f7bd3fde4ccf38628f17a72890f7ff36117a72df76065fb475887493dbc192e564202ab280f06550155409b33b778421cf487d51dbcd27399a36b59231be5f9d402cb32ac4baf773039aa8fbd3dc198ca9a2b98f94f1eae2cf3e6fe16ec24a98b78fbf43f4804a7874106c376e0cd13ac0e485fa44225ce1b13079c939c3505ad73c5b89ff47dcb9b414de35fa1757f4fa7959b2dca1", 0xb2}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0x802069dd, &(0x7f00000001c0)) connect$unix(r3, &(0x7f0000000040)=@file={0x9, 0x1, './file0/file0\x00'}, 0x10) closefrom(r0) 2.444293053s ago: executing program 6 (id=42): r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0xa010, r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000080)=0x3, 0x4) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) r3 = socket(0x18, 0x1, 0x7) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000300)="fac9f12d37deda02c0856e3ad1e767359ae0551b4ec6a930c2c1179bf9dc8fb46617978d7267e7f65a239775b2c295289de2681ea5ef38e235c5c37560f75384fa2653fda3fd6f1519e51f9def46a3aba309a2c3d671aa3e3ed4d254f0eb7a99cc4c0591c6054e0c3cf56fb49926b66fd5c2a1416d21e0e3655c0dd96b634f68975ef9307b110ce03e9f50385d858503e0696de14fca2d50a58fdfa95954646eccf930a799588d1e674221", 0xab) bind(r3, &(0x7f0000000240)=@un=@file={0x80, 0x0, './file0\x00'}, 0xa) syz_emit_ethernet(0x9e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db090000680000fed38d5ba80b9e61cd0c535a98000000ff0200000000000000000000000000013c0800080000000000000000000000000300000000000001ff02000000000000000000000000000100000000000000000000000000000000ff0100000000000000000000000000012c"]) futimens(0xffffffffffffffff, &(0x7f00000002c0)=[{0xfffffffffffffe00, 0x8}, {0x8, 0x100000000}]) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x18, 0x6, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x30) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x308) openat(r4, &(0x7f0000000040)='./file0\x00', 0x6dd654853b25e28d, 0x8) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x16}, 0x4, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="8a1fafef9d32e6dec10a", 0xa) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0xa010, r0, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000080)=0x3, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) (async) socket$inet(0x2, 0x2, 0x0) (async) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) (async) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) (async) socket(0x18, 0x1, 0x7) (async) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000300)="fac9f12d37deda02c0856e3ad1e767359ae0551b4ec6a930c2c1179bf9dc8fb46617978d7267e7f65a239775b2c295289de2681ea5ef38e235c5c37560f75384fa2653fda3fd6f1519e51f9def46a3aba309a2c3d671aa3e3ed4d254f0eb7a99cc4c0591c6054e0c3cf56fb49926b66fd5c2a1416d21e0e3655c0dd96b634f68975ef9307b110ce03e9f50385d858503e0696de14fca2d50a58fdfa95954646eccf930a799588d1e674221", 0xab) (async) bind(r3, &(0x7f0000000240)=@un=@file={0x80, 0x0, './file0\x00'}, 0xa) (async) syz_emit_ethernet(0x9e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db090000680000fed38d5ba80b9e61cd0c535a98000000ff0200000000000000000000000000013c0800080000000000000000000000000300000000000001ff02000000000000000000000000000100000000000000000000000000000000ff0100000000000000000000000000012c"]) (async) futimens(0xffffffffffffffff, &(0x7f00000002c0)=[{0xfffffffffffffe00, 0x8}, {0x8, 0x100000000}]) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x18, 0x6, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x30) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x308) (async) openat(r4, &(0x7f0000000040)='./file0\x00', 0x6dd654853b25e28d, 0x8) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x16}, 0x4, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="8a1fafef9d32e6dec10a", 0xa) (async) 2.215633553s ago: executing program 7 (id=47): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = socket(0x18, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x800, "fe80000400000000fdff00"}, 0x1c) write(r0, &(0x7f0000000300)="0c26fa85512538a0de2f710e04626401f73a7e02cc9839fe747b0513b3a6a2e040bbca7aed87eb8c68703a487c766b9415e90ae86162696d03d584441e0f0fec06be31aa3a27832dfaaa89cf66164c24ba0e1c4ea8ab72faa0c33557718d3a9e5b4df637c81ff1808cbbe025cafd5187185a3aef26548f3ec8c82081562249547965161e8800707749494e750ad958ecdea9df0457c60f974dd9d21eed7cbd1d60589e91d94c68e17181de477f79fd4305e89581270dbc7f971f86d32832890c1263324540b41b0d8eb6ca59e1ad1fb0d407c7670982b29e98a2", 0xda) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) r3 = shmget$private(0x0, 0x3000, 0x143, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r3, 0x1, 0x0) shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000180)={{r1, r2, r1, r2, 0xc4, 0x1, 0x0, 0x0, 0x3}, 0x1, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x8002, 0x36e, 0x7, 0x80000002}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x8) 2.197316783s ago: executing program 8 (id=33): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x0) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00') (async) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00') 1.95893528s ago: executing program 2 (id=49): r0 = msgget(0x3, 0x702) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/250}, 0x102, 0x3, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) msgget(0x3, 0x464) 1.957251864s ago: executing program 3 (id=50): r0 = socket(0x2, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setitimer(0x1, &(0x7f00000000c0)={{0x8000007, 0x1}, {0x6, 0x2004}}, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000004c0)='w\x00') mkdirat(r2, &(0x7f0000000540)='./file0\x00', 0x184) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, 0x0, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) 1.954766424s ago: executing program 4 (id=51): fcntl$lock(0xffffffffffffffff, 0x0, 0x0) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) pwrite(r1, &(0x7f0000000240)="005e9ac69b", 0x5, 0x2000000008) close(r0) socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 1.943343568s ago: executing program 6 (id=52): r0 = open(&(0x7f0000000040)='./file1\x00', 0x80, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='r\x00') 1.941645451s ago: executing program 7 (id=53): r0 = open(&(0x7f0000000140)='./file0\x00', 0x40000, 0x4ebfac6bbaf79eb) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)='#!', 0x2}], 0x1) write(r0, &(0x7f0000000040)="89202009095c2a415642000000005624b77b6a0a", 0x14) pwrite(r0, &(0x7f00000000c0)='\x00', 0x1, 0x8) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1.93769399s ago: executing program 4 (id=54): bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0xe, 0x1, './file1\x00'}, 0xa) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x40, 0x6, 0x7, 0x3, 0x8200, 0x0, 0xc6, 0x7, 0x400000001, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff7], [0x5438b94c, 0x5, 0x1004, 0x7, 0x1, 0x7f, 0x9, 0x3, 0x17a90785, 0x3], [0x6, 0x8, 0x4006, 0x8000000008, 0x10000, 0x211, 0x1000002], [0x100000000, 0x10801, 0x5, 0xa, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x7}, {0x2, 0x925, 0x3, 0xb38}, {0xffff, 0x7fffffff, 0x0, 0x7b}, {0xb, 0xfffffbff, 0x102, 0xfffffffffffffffd}, {0x4, 0x3, 0x0, 0x100}, {0x1f, 0x6, 0x0, 0x7}, {0xe4, 0xffffff7d, 0x1ff, 0x1}, {0x3, 0x10000, 0x8004, 0x8000}], {0x8, 0x7, 0x401}, {0xfffb, 0xffffbfc0, 0x8}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0206925, &(0x7f00000001c0)) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) open$dir(&(0x7f00000000c0)='./file0/file0/..\x00', 0x40000, 0x141) pwrite(0xffffffffffffffff, &(0x7f0000000040)="45b239bb2cf8f92310e4e4c8c2d4f3312fdc11f3f2847f", 0x17, 0x4) r1 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) r2 = open$dir(&(0x7f0000001840)='./file0\x00', 0x2, 0x53) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) ftruncate(r1, 0x10000) ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f0000000000)={""/16, @ifru_dstaddr=@in6}) ioctl$DIOCRGETTSTATS(r1, 0xc4504440, &(0x7f00000013c0)={{'./file0\x00', './file0\x00', 0x11, 0x5}, &(0x7f0000000300)=[{'./file1\x00', './file0\x00', 0x0, 0x3}, {'./file0/file0/..\x00', './file1\x00', 0x40, 0x29}, {'./file1\x00', './file1\x00', 0x12, 0x8}, {'./file1\x00', './file0\x00', 0x10, 0x80}], 0xd35, 0x4, 0x10, 0x3800, 0x4cca, 0xb, 0x44, 0xff}) 1.88624168s ago: executing program 6 (id=56): poll(0xffffffffffffffff, 0x0, 0x2) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) socket(0x6, 0x1002, 0xa3) 1.885327488s ago: executing program 7 (id=57): r0 = getsid(0x0) wait4(r0, 0x0, 0x19, 0x0) 1.884415619s ago: executing program 7 (id=59): syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6099cea6001c2c03cb697a653e336f000000500000000000ff0200000000000000000000000000011100002e"]) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x3e, &(0x7f0000000040)="00fb534f", 0x4) getsockopt(r0, 0x29, 0x32, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="ff16ffffffffff12263abc614e86dd60f5320000182c03cb697a653e336f000000500000000000ff0200000000000000000000000000018700907800"/79]) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6099cea6001c2c03cb697a653e336f000000500000000000ff0200000000000000000000000000011100002e"]) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r0, 0x1000000000029, 0x3e, &(0x7f0000000040)="00fb534f", 0x4) (async) getsockopt(r0, 0x29, 0x32, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="ff16ffffffffff12263abc614e86dd60f5320000182c03cb697a653e336f000000500000000000ff0200000000000000000000000000018700907800"/79]) (async) 1.856355243s ago: executing program 1 (id=60): getppid() setsid() r0 = socket(0x1, 0x1, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x8) r1 = getppid() fcntl$setown(r0, 0x6, r1) getsid(r1) sysctl$hw(&(0x7f00000000c0)={0x6, 0x1d}, 0x2, &(0x7f0000000540)='J/', &(0x7f0000000040)=0x2, 0x0, 0x0) 1.636729077s ago: executing program 1 (id=61): socket(0x0, 0xfc1e7e0378056b78, 0xff) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0x8}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4000}, {0x0, &(0x7f00007ae000/0x1000)=nil, 0x4bb6}, {&(0x7f0000756000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000212000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000501000/0x1000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f00003ea000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00001d1000/0x3000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc760, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0x37) 1.315909496s ago: executing program 1 (id=62): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x9, 0x91c, 0xb, 0x180, 0x0, 0xb8, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x3, 0x1001, 0x5, 0x1, 0x1, 0x8, 0x7, 0x1, 0x3], [0x6, 0x9, 0x10000, 0x8000000008, 0x10000, 0x9, 0x2], [0x100000000, 0x10801, 0x0, 0x10000000000005, 0x3, 0xa], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x924, 0x3, 0x338}, {0x1000, 0x1, 0x0, 0x5}, {0x8, 0x2, 0x1003, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0xeff8, 0x4, 0x0, 0x7}, {0x5f, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x6, 0x5}], {0x52b, 0x4, 0xfffffffc, 0x8}, {0xfffb, 0x3, 0x40000008, 0xfffffffffffffffe}}}) (async, rerun: 32) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 32) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0286988, &(0x7f00000001c0)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) (async) ftruncate(r0, 0x79c8) (async) sysctl$net_inet_ipip(&(0x7f0000000300)={0xa}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) unveil(0x0, &(0x7f00000012c0)='x\x00') (rerun: 64) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 1.315145444s ago: executing program 3 (id=63): sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x32, 0x3}, 0x4, &(0x7f0000000400)="060c64e190a00091561d5086a7eb29ec8b4c3c306815c1a7d13aaff6af0f388c38022017aa8478ccce92333be93ac208fbdbd1d26401d95057453939bc3a05bd7a407df6d36c599e17957eda386cb5c8", &(0x7f0000000280)=0x50, &(0x7f00000002c0)="8632c8b6f78fd443a1f6ccb692b74ceffd2a1dd88ae3effdf2bda1", 0x1b) r0 = syz_open_pts() r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000140), 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005", 0x3, 0x2, 0x0, 0x0) mmap(&(0x7f000004b000/0x1000)=nil, 0x1000, 0x0, 0x9010, r0, 0x3) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = socket$unix(0x1, 0x1, 0x0) r5 = setsid() r6 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r6, 0xc0206983, &(0x7f0000000100)) semctl$IPC_SET(0x0, 0x0, 0x1, 0xfffffffffffffffe) fcntl$setown(r6, 0x6, r5) bind$unix(r4, &(0x7f00000000c0)=@file={0xe, 0x0, './file0\x00'}, 0xa) listen(r4, 0x1) fstatat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x6) r7 = socket$unix(0x1, 0x1, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0x37) connect$unix(r7, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) r8 = socket$inet(0x2, 0x1000, 0x20) read(r8, &(0x7f0000000300)=""/240, 0xf0) getitimer(0x0, &(0x7f0000000000)) r9 = socket(0x6, 0x8000, 0x3) setitimer(0x1, &(0x7f0000000000)={{0xf, 0xe}, {0x0, 0x7}}, &(0x7f0000000040)) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) semctl$SETVAL(0x0, 0x2, 0x8, 0x0) shutdown(r9, 0x2) 1.29098008s ago: executing program 4 (id=64): sysctl$vm_swapencrypt(&(0x7f0000000180)={0x2, 0x5, 0x2}, 0x3, &(0x7f00000001c0)="a48e3491ce5acc4756f4867a03c58350d25e35e638f00cf106facf4245293f191ad2b434f516ec07c61c5cd5350fcda54cd7c388729df84fd2cedc963d5034b933c6a3a6883233e8a866e83368dcec990d450589bdac256d10692563b6cce81be07544595af4037b7761197aab9496923b4935428aa33a9b2aa7d1dc2b0ea9435f3b19ec34e9b883b973e8e40c7ea747f483cf82d5efd89644d2463014b241558ac82c36c4714ec1f7afafd43901bf19b7443e1eb41d1f50aac552df850629442d08449075b433c8f4f50c1c63f246d3f63382a5fe45b8a66cd65bf802172466130498398bccf07f4b", &(0x7f00000002c0)=0xe9, &(0x7f0000000300)="519bde131893dd7f5184eac6308bd302e33d32c7d263ec81d6ec621331897a0faf8bfe7f893f0379db8b287124fa9c997216550f416c6c5f3a84e78820ab3747853eb721c3e6b6f01ec3f4638e00de48d576e224bd049e86ee2c5ab7033a0d3870802ce6c18a91216225f784acb87eea30955f92ee278c1fbf9bd2373d47680013be991901dd8352f3aa9c404f380e4acd62b7a9fa83a4dcea100c60bb392a9e5501892f8cbd4cbcd2a63b7b3d5b08e2f431cb44ae49a7256017e2f8ff957347d84d6e50ead643b46182931871f91772dab07ab3aae063cb54354ffd37e61cdafb1d6195", 0xe4) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r0 = shmget$private(0x0, 0x4000, 0x95a999646a72d5f2, &(0x7f0000022000/0x4000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x6}, 0x2, &(0x7f0000000040)="61bac32c16c39b2dfb5f", &(0x7f0000000080)=0xa, &(0x7f00000000c0)="1145577a4a679ea1aeba9af29b24ad9f182fad8c21cafb761738519ad43760ef6235b48690030c0f47e3af539cc03ef7ecd34f4d44bc50e05c3a277e08126c8aa0a344f90a23c7b17b761a9d0630f6035e1329520e4cb7d09f699d3adcc3e81c57d83eac40253f25552e35b8b82a2a77f0a1347e4eacd5ddadc9c14c63aac7cc6e3dc615ca4a5d8a37fd8a7015aef51c6343961bcf570050788980f2", 0x9c) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0xb, 0x0, 0x0) 1.289793883s ago: executing program 6 (id=65): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x3, &(0x7f0000000340)="06000000", 0x4) r1 = socket(0x11, 0x3, 0x0) r2 = socket(0x11, 0x3, 0x0) connect$unix(r1, &(0x7f00000001c0)=@file={0xe1, 0x1, './file0\x00'}, 0xa) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000234000/0x3000)=nil, 0x3000, 0x5, 0x10, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd684498fb00303c0bfe80000200000000000000000000006fc2"]) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000540)='./file0\x00', 0x184) r5 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r5, 0xa, 0xffffffffffffffff) r6 = socket(0x18, 0x1, 0x0) close(r6) r7 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r8 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r8, 0xc038694e, &(0x7f00000001c0)) setsockopt(r7, 0x1000000029, 0x4, &(0x7f0000000040)="03000000", 0x4) connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x7, "fe8234022c23bdd0e86bc2a6b5ae30dd", 0x3}, 0x1c) rmdir(&(0x7f0000000140)='./file0\x00') 1.289294355s ago: executing program 7 (id=66): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c}) r0 = syz_open_pts() ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000040)=0x4) close(r0) r1 = syz_open_pts() ioctl$AUDIO_SETPAR_ctl(0xffffffffffffff9c, 0xc0404125, &(0x7f00000000c0)={0x1, 0x1, 0x18, 0x4, 0x1, 0x2ee00, 0xc, 0xba9b27c117fa8828, 0x34, 0x9a6f}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) writev(r0, &(0x7f0000000400)=[{&(0x7f00000009c0)="b8e041a083df24f9c53a9853f49596c0691c76b1c28fb9c8ad6338c9e2ee09322589f295af03c23c43342598a976ebdbdcf37ef69d0ec74c552d2835e4b108783bcad6b44b50558d981586ae0366f6b4c4856bf5e1212262c020d289ef69e71b1f6b624a91c3c631fa27ed138e29655fe7ada420f0f3f87c1c2aa8ad343fa6dcbfffcfe652892796a1dd14ecace5c8ea9b471acbc77c53906510e98eb871b557e819b76cb1596537b93b1f45fc32fe96b4e939daf50e06acd7bc3e72ab63373a0407572a150461fcdc2816fcda9b0f", 0xcf}], 0x1) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x29) close(r2) r3 = shmget$private(0x0, 0x4000, 0x90, &(0x7f0000ffc000/0x4000)=nil) r4 = getegid() setregid(0xffffffffffffffff, r4) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000380)={{0x0, r4, 0x0, 0x0, 0x180, 0x9, 0x0, 0x0, 0x9}, 0x2, 0x0, 0x0, 0x25d0, 0x0, 0x40000000000047, 0x4000000000000008, 0x8, 0x9, 0x8000, 0xa}) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 1.177989718s ago: executing program 4 (id=67): r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000080)={0x401, 0x7}, 0x10) r1 = syz_open_pts() ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000000)={0x74, 0x7fff, 0xe0, 0x35b}) select(0x40, &(0x7f0000000940)={0x9, 0xfffffffffffffff7, 0x9, 0x7f, 0x2638, 0xe6fc, 0x4, 0xffff}, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) getsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f0000000000), &(0x7f0000000040)=0x10) closefrom(r3) 1.177402671s ago: executing program 1 (id=68): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0xfc5f, "8db245a294344ffbf7e60e1944c79753", 0x5}, 0x1c) r1 = semget$private(0x0, 0x3, 0x201) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000040)=[0x5, 0x2, 0x123, 0x120, 0x8001, 0x6, 0x57, 0x9, 0x8]) 1.174809253s ago: executing program 1 (id=69): r0 = socket(0x18, 0x2, 0x0) fchflags(r0, 0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0x8}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4000}, {0x0, &(0x7f00007ae000/0x1000)=nil, 0x4bb6}, {&(0x7f0000756000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000212000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000501000/0x1000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f00003ea000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00001d1000/0x3000)=nil, 0x5}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb01, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000666000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa7c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) close(0x3) r2 = semget$private(0x0, 0x4, 0x4) r3 = getgid() semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000280)={{0x0, r3, 0x0, r3, 0x1c4, 0x7e, 0x0, 0x0, 0x5}, 0x0, 0x103, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffdffc}) semctl$GETPID(r2, 0x2, 0x4, &(0x7f0000000000)=""/248) pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x4, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0xf0, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x4000, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x7, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff9, 0xb}, {0xe, 0xfc, 0xfffffffe, 0xb}], {0x7, 0x8, 0x80000006, 0x3}, {0xfffe, 0x5, 0x6d5, 0x6}}}) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) closefrom(r4) r6 = socket(0x18, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x800, "fe80000400000000fdff00"}, 0x1c) write(r6, &(0x7f0000001040)="a6a09bee3b0fc958e1f681e8b3f669376a5e48dc3c38123c00bfad65f4d21171ba59cb4257f266f1a2e98efce4d3f75df67245a27dd7996a740d8a20b8ac1f755cac7e240541b28d2868ef44ffc0a761b7aea6c949c05d7162b058c56a12829c621e4a9b9ed7ecb149a95275d85b89a2fe2a0816507ca3305b38d2fece361214ff4457755f44297a4f657145f60b15f939", 0x91) msgget$private(0x0, 0x102) r7 = socket$inet(0x2, 0x1, 0x0) recvfrom(r7, &(0x7f0000000ac0)=""/27, 0x1b, 0x1842, &(0x7f0000000b00)=@in={0x10, 0x2, 0x3, 0xeb1}, 0x10) r8 = getgid() munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) setregid(r8, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000000)="8ece0629fcd96a9caa5ebd880ccd2fcbc3b52d4c9f381c43645e640196d6f8994b0958421f12319a2c8f9542940b69ce4db5e80423dc6b2748bd2f57d26f80ebcfce01d0b03eefc24ba47ab2d789a349691a27eddd9d228c521b5771a28b2fc28f6ce70fe8919bac82a8530046ee62dde44b1be901b4b3c95186142f1919f011075f661bf3ae23", 0x87) setsockopt$inet_opts(r7, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) setsockopt$inet_opts(r7, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) 1.169846897s ago: executing program 6 (id=70): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x25, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x0, 0xcf, 0xd, 0xd9b, "1bb7e60ab87aa57800000000d0d200000000fd00", 0x40, 0x3}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="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", 0x207}], 0x1) r2 = socket(0x11, 0x3, 0x0) r3 = msgget$private(0x0, 0x80) msgsnd(r3, &(0x7f0000002f00)={0x1}, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x1c0, 0x43, 0x0, 0x0, 0x3}, 0x6205, 0x2a3, 0x4, 0x544, 0xe49, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}) pselect(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(r3, &(0x7f0000000300)={0x0, ""/147}, 0x9b, 0x0, 0x1000) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000003c0)="ac65594157a7604ef16fb56cc14f343c71a4e6d4b76c3aed84d02d291338e61696a47a111754e55b696ec88e0bcd1f4a80d5119f06598ee5e7ac8d23839f1eb1dda988da32cd52174030bd13b980744fd02d0604810bad910b14f5eccf77c771e45700bcc20fd2e1d57f1c1253580ad21dd1ea4526323cccc8d009e7be92aa4e616ef16bcab86c2b19848766ef897e5288d50a6a9a2add34526435", 0x9b) sendto$unix(r2, 0x0, 0x0, 0x2, 0x0, 0x0) symlink(&(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$unix(r2, &(0x7f0000000480)=@file={0xa6, 0x0, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xfb) 1.169604696s ago: executing program 8 (id=33): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x0) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00') (async) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00') 550.729281ms ago: executing program 1 (id=71): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0xfd, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xfffffff7}, {0x17f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='c\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x8) 550.327809ms ago: executing program 2 (id=72): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="93805b0a5df2", @remote, [], {@ipv4={0x8863, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x93781d0, @multicast1}, @icmp=@mask_reply={0x12, 0x0, 0x0, 0x0, 0xb42d, 0x4}}}}}) (async) r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000080), &(0x7f0000000140)=0xffffffffffffffb1) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0xffff, 0x40, &(0x7f00000001c0)=0xda16, 0x4) (async) r3 = socket(0x18, 0x2, 0x0) r4 = syz_open_pts() fcntl$lock(r4, 0x9, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x1000300000080}) flock(r4, 0x1) flock(r4, 0x3) fcntl$lock(r4, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x100000003}) ioctl$FIONREAD(r3, 0xc1206922, &(0x7f0000000100)) 545.132073ms ago: executing program 3 (id=73): kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffff6, 0x0, 0xf27ff7794bbc9c2d, 0xfb, 0x10000}], 0x1, 0x0, 0x9b6c, 0x0) (async) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff6, 0xa7, 0x40000000, 0xfffffffffffffffd, 0x13fff}], 0x4, 0x0, 0x8, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000000)=[{{r0}, 0xffffffffffffffff, 0x41, 0x1, 0x100000001, 0x1}], 0xb6d, 0x0, 0x78ae, 0x0) sendmmsg(0xffffffffffffffff, 0xfffffffffffffffe, 0x38, 0x8) 544.338235ms ago: executing program 4 (id=74): r0 = socket$inet(0x2, 0x4000, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) setsockopt(r0, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x3c, 0x2066, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x5, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x8200, 0x0, 0xfffc, {[@md5sig={0x13, 0x12, "8094d3555ee04e56ede729d2fc7bad30"}, @generic={0x1, 0x2}]}}}}}}}) 531.764488ms ago: executing program 6 (id=75): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x16, &(0x7f0000000040)="fd0cc085", 0x4) r1 = msgget$private(0x0, 0x1ba) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0xb) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x5, 0x9) syz_emit_ethernet(0x11b, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa238eb784df1b1e13704aaabb86dd684498fb00e53c0b33a8020fc8d98480657b31de55aacc0eff0200000000000000000000000000012b050000000000000502000304015ba41f39fec785be51dc84e28f56b5df54432be6fc960ba1cddac8b5b3de070000004e234e21", @ANYRES8=r2, @ANYRES64=r2, @ANYBLOB="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"]) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x401, 0x0) r3 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@in6, &(0x7f00000000c0)=0x1c) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000100), 0xc) msgsnd(r1, 0x0, 0x401, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_RMID(r1, 0x0) 2.436336ms ago: executing program 7 (id=76): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="210762f11596", [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x1b, 0x2c, 0x67, 0x200, 0xb0, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0xc, 0x3, 0x3, [{[@empty], 0x9}, {[], 0x6}]}]}}, @udp={{0x3, 0x0, 0x8}}}}}}) fcntl$lock(r0, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0x300000003}) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000000200000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x406, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x10, 0x2, 0x3}, 0x10) listen(r2, 0x7fff) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f4003c006700000006907800000005ac1400aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00282009078fffc13128094d3555ee04e5602000000000000000000"]) r3 = syz_open_pts() sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x58}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0x6, &(0x7f0000000100)={0x8, 0x2}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlockall(0x1) clock_gettime(0x2, &(0x7f0000000000)) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/4106, 0x1000}], 0x100000000000030a) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0xffffffff, 0x1, 0x8cbe, 0x18fff51e, "900300000000000000cd0d03749d77db7f12a7eb", 0x8, 0x9}) syz_open_pts() r4 = semget(0x3, 0x2, 0x1c) semctl$SETALL(r4, 0x0, 0x9, &(0x7f00000000c0)=[0x4]) 1.63164ms ago: executing program 2 (id=77): sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x10}, 0x4, &(0x7f0000000040)="69984f98925b29816bb25ead4f4c4945658978ecab73919ae5e0fe8b2a2d2ffc887e75d7c2b54626254df11938b30cadd732cb047231812dbe0d5399f3d2d1fb956951d719d7df77d74d40cbd9ce8fbba0e386cdd22d5bcaa0bf6f802e038f471d7c555b1addabcd06796eeb3cb83cd71eb8c8af05ef0a587122cf484bd1fa37db0313a8bc7d86b517d10a969a1dd422827831a5fd5cb5874330531e407b7b1f6136deba996e282d70e85654e2e1c746946e7abf25ffc60cb56f013bfb6d969ae209f54239647f68fbda3a73a0064bcdd4c9d135d5d1a1dd85ab3f6952bd5c81286b38b6a326f6", &(0x7f00000001c0)=0xe7, &(0x7f0000000200)="72dc708cacfceab958cefea1c136aac7ecdb59b2dfacbf414bd416e593bcc4573f9b145ff3bbcfc4ba663333a5628c7336da1877a7795a3a16b5f93797773bbe1dc3970f9ca899815b5fb1e1b985ca0e0da7087de9b19788f9bbd4ffa9aa15c5ea5a39ebe6746d9e39855d5dc0aa4b7d71406fdcadc7340743e59c48e27bd2be53752a6eb7662871da5f44e8de59ee81ac1efca8ce5af6fb4b8a", 0x9a) (async) pwrite(0xffffffffffffffff, &(0x7f0000000140)="a39cbb7636ffb260161ad84e3189f3cb29f94aadd338b2a6cecca24b866929bdfbfb93a64a0cfe3e3e58d8ccd56f1cde0d2518e5b8c52feaa742f7ce467f0fbf38afe6cc44572877938191ab1ade0170c9", 0xffffffffffffffcb, 0x40007) sysctl$net_inet6_icmp6(&(0x7f00000002c0)={0x4, 0x18, 0x3a, 0x9}, 0x4, &(0x7f0000000300)="2b6b1544f45c449fbbb2ab8bbac770d221c9ff6723324dfc4ebb84e9bba3f783907b56b88ab484bef9b6e170438b41d292c50a41f9ebc281779f9aefcadb6607621fd9b76d53b9772ad236d41d21c5e9e0c70823892e35fe95e192b7863f99907ad47165a8268fb8529b758ba9ee8b037211e8dc7c0bc8511c43e13ade75eb0bc5e81282afdbc9ca18", &(0x7f00000003c0)=0x89, &(0x7f0000000400)="df2b89db2c85db6a1de84f615e4c63731c2e8b1130c3bb6be3a825523980c8fd446765e9887863d2e72ff1ab73e9335617e4139b60b5f0bbfd46fbb1648b21547ec3063094afdec87209f9cdbe89b542374021b3b776372dc27a5de881a426f735dc003490a66a0d2c4a08ba5f2aa9800025fb6d7c0c0a022378e5e1ff2d0285213ab5a3024a8d1b429c0f788a41662b9d4d3da54f24ca07e3a2ce", 0x9b) 638.451µs ago: executing program 3 (id=78): munmap(&(0x7f0000009000/0x4000)=nil, 0x4000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x5, 0x9d}) (async) open(&(0x7f0000000000)='./file0\x00', 0x20, 0x2) 188.562µs ago: executing program 4 (id=79): syz_emit_ethernet(0x98, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db834467001100000000000000000000200008907800000000000000000000000000000014"]) (async) ioctl$WSKBDIO_SETDEFAULTBELL(0xffffffffffffffff, 0x80105705, &(0x7f0000000040)={0x3ff, 0x8, 0xffffdf7b, 0x1}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x4) (async) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0xfffffff7, 0x9) syz_emit_ethernet(0x20d, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=r1, @ANYBLOB="610800069078000813123f6186177d2e4b517c1ed0d572566086080afffffff8000000041312a5dd398282b7237724a3a1efb0c4cccb031051dc1ded46934ce4fe2d06b9fde0020400030000333907def5705306e86205becf3ba565af8b5ab59108a99eaca4901d1de912d3cd119d051209295f47cdebb6a739a0e7f9ee44e4b8e460d4eb2ba42b525134420ee565f0b2b0254d0fc681aa9a4dc0286f02bff6c703695b85ad7c5200f5cdd2cc7cb31ecd4296b9c4c6bea6d97f7eb821aa9c1390db08785674eefc31becb00f923180a89afcfe3ada5f9a646c92b"]) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) r3 = socket$inet(0x2, 0x8000, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc09, &(0x7f0000000140)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) 0s ago: executing program 8 (id=33): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x0) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00') (async) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. pmap_unwire: wiring for pmap 0xfffff1806ce46b00 va 0x370a1b40000 didn't change! panic: kernel diagnostic assertion "pg->wire_count != 0" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_page.c", line 1207 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 117684 95033 32767 0x10 0 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff834bcfc0) at panic+0x1e5 __assert(ffffffff834f928a,ffffffff8344d301,4b7,ffffffff8344d336) at __assert+0x29 uvm_pageunwire(fffff180091e59e8) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffff1800f1893f8,370a1b40000,370a1f3f000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffff1800f1893f8,fffff1806cef3ec0,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffff1800f1893f8) at uvm_map_teardown+0x117 exit1(ffff800045fef770,0,0,1) at exit1+0x71b sys_exit(ffff800045fef770,ffff80002a32a1e0,ffff80002a32a130) at sys_exit+0x1a syscall(ffff80002a32a1e0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7bada49f91a0, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "pg->wire_count != 0" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_page.c", line 1207 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff834bcfc0) at panic+0x1e5 __assert(ffffffff834f928a,ffffffff8344d301,4b7,ffffffff8344d336) at __assert+0x29 uvm_pageunwire(fffff180091e59e8) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffff1800f1893f8,370a1b40000,370a1f3f000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffff1800f1893f8,fffff1806cef3ec0,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffff1800f1893f8) at uvm_map_teardown+0x117 exit1(ffff800045fef770,0,0,1) at exit1+0x71b sys_exit(ffff800045fef770,ffff80002a32a1e0,ffff80002a32a130) at sys_exit+0x1a syscall(ffff80002a32a1e0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7bada49f91a0, count: -11 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a329e00 rbx 0xffff80002999ee07 rdx 0 rcx 0xffff800045fef770 rax 0xffff80002999dff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xdcda42854addb462 r11 0xfd066125d093950b r12 0xffff80002999ec08 r13 0 r14 0 r15 0x1 rip 0xffffffff821e9685 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a329df0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=379128 pid=53361 tcnt=0 stat=onproc flags process=1018 proc=2000 runpri=32, usrpri=71, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff800045fef770 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff800045fee7e0,0xffff800045feefb8 process=0xffff80003c3ce1d0 user=0xffff80002a325000, vmspace=0xfffff1800f1893f8 estcpu=21, cpticks=48, pctcpu=0.45, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 31043 162922 75188 32767 2 0x10 syz-executor 31043 517009 75188 32767 2 0x4000010 syz-executor 31043 16796 75188 32767 2 0x4000010 syz-executor 31043 482001 75188 32767 2 0x4000010 syz-executor 18271 355927 65343 32767 2 0xc90 syz-executor 18271 415209 65343 32767 3 0x4000090 kqsel syz-executor 18271 145559 65343 32767 3 0x4000090 fsleep syz-executor 52557 181293 72691 32767 2 0xc90 syz-executor 52557 334455 72691 32767 3 0x4000090 fsleep syz-executor 52557 58501 72691 32767 3 0x4000090 fsleep syz-executor 85897 422414 95033 32767 2 0x10 syz-executor 85897 173642 95033 32767 3 0x4000090 msgwait syz-executor 54970 362612 12100 32767 2 0xc90 syz-executor 72691 159759 88520 32767 2 0xc90 syz-executor 65343 325277 68148 32767 2 0xc90 syz-executor 95033 117684 69292 32767 7 0x10 syz-executor 75188 499318 56997 32767 2 0xc90 syz-executor 7587 207498 51803 32767 3 0x90 piperd syz-executor 11486 399497 54229 32767 2 0xc90 syz-executor 12100 105101 36902 0 3 0x82 wait syz-executor 69292 55742 36902 0 3 0x82 wait syz-executor 56997 8868 36902 0 3 0x82 wait syz-executor 68148 53035 36902 0 3 0x82 wait syz-executor 88520 249347 36902 0 3 0x82 wait syz-executor 51803 16382 36902 0 3 0x82 wait syz-executor 54229 155195 36902 0 3 0x82 wait syz-executor 36902 512267 64745 0 3 0x82 nanoslp syz-executor 64745 491198 47425 0 3 0x10008a sigsusp ksh 47425 237635 49676 0 3 0x98 kqread sshd-session 49676 499292 70648 0 3 0x92 kqread sshd-session 69867 171414 1 0 3 0x100083 ttyin getty 70648 230132 1 0 3 0x88 kqread sshd 71067 290676 84545 73 3 0x1100090 kqread syslogd 84545 209576 1 0 3 0x100082 sbwait syslogd 91201 439967 1 0 3 0x100080 kqread resolvd 63657 270462 8117 77 3 0x100092 kqread dhcpleased 20677 37944 8117 77 3 0x100092 kqread dhcpleased 8117 260378 1 0 3 0x80 kqread dhcpleased 3656 448146 0 0 3 0x14200 bored smr 509 7094 0 0 3 0x14200 pgzero zerothread 15087 189212 0 0 3 0x14200 aiodoned aiodoned 83200 106350 0 0 3 0x14200 syncer update 30511 12399 0 0 3 0x14200 cleaner cleaner 74911 429642 0 0 3 0x14200 reaper reaper 21402 255444 0 0 3 0x14200 pgdaemon pagedaemon 96243 235992 0 0 3 0x14200 bored viomb 64715 493196 0 0 3 0x40014200 acpi0 acpi0 51145 521373 0 0 3 0x40014200 idle1 71581 255651 0 0 3 0x14200 bored softnet1 4555 74722 0 0 3 0x14200 bored softnet0 76193 378777 0 0 3 0x14200 bored systqmp 22624 498043 0 0 3 0x14200 bored systq 93419 389622 0 0 3 0x14200 tmoslp softclockmp 98826 514149 0 0 3 0x40014200 tmoslp softclock 82905 459405 0 0 3 0x40014200 idle0 1 349930 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11048 12016K 12034K 166960K 12142 0 pcb 17 12K 12K 166960K 17 0 rtable 219 6K 7K 166960K 355 0 pf 29 16K 16K 166960K 31 0 ifaddr 38 6K 7K 166960K 44 0 ifgroup 46 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 68 36K 37K 166960K 70 0 ioctlops 0 0K 2K 166960K 32 0 iov 0 0K 16K 166960K 6 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1296 82K 82K 166960K 1418 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 5 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 21 77K 125K 166960K 243 0 sigio 0 0K 0K 166960K 2 0 proc 58 99K 147K 166960K 504 0 subproc 63 3K 5K 166960K 135 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 11 0 in_multi 88 6K 7K 166960K 103 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 7 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 369 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 241 161K 185K 166960K 3614 0 UVM aobj 8 2K 2K 166960K 8 0 pinsyscall 42 84K 111K 166960K 1323 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 5 0 NDP 10 0K 2K 166960K 27 0 temp 37 9115K 9123K 166960K 3957 0 kqueue 13 20K 27K 166960K 39 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 42 0 39 1 0 1 1 0 8 0 rtentry 176 113 0 12 6 0 6 6 0 8 0 unpcb 144 83 0 68 2 0 2 2 0 8 1 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 28 0 24 1 0 1 1 0 8 0 arp 136 18 0 2 1 0 1 1 0 8 0 inpcb 328 119 0 109 2 0 2 2 0 8 0 ip6q 72 1 0 1 1 0 1 1 0 8 1 ip6af 40 2 0 2 1 0 1 1 0 8 1 nd6 152 26 0 3 1 0 1 1 0 8 0 kcovpl 48 15 0 8 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 470 0 44 30 0 30 30 0 8 1 art_table 40 471 0 44 5 0 5 5 0 8 0 art_node 32 113 0 21 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 4 1 0 1 1 0 8 1 semapl 72 3 0 0 1 0 1 1 0 8 0 shmpl 112 5 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1655 0 188 92 0 92 92 0 8 0 ffsino 296 1655 0 188 114 0 114 114 0 8 0 nchpl 144 1951 0 255 63 0 63 63 0 8 0 vnodes 216 1799 0 0 100 0 100 100 0 8 0 namei 1024 5843 0 5843 1 0 1 1 0 8 1 percpumem 16 50 0 1 1 0 1 1 0 8 0 kstatmem 264 25 0 2 2 0 2 2 0 8 0 scxspl 216 6931 0 6931 9 1 8 8 1 8 8 plimitpl 152 60 0 36 2 0 2 2 0 8 0 sigapl 424 520 0 470 7 0 7 7 0 8 1 knotepl 120 271 0 0 9 0 9 9 0 8 0 kqueuepl 224 43 0 33 2 0 2 2 0 8 1 pipepl 344 147 0 120 3 0 3 3 0 8 0 fdescpl 528 504 0 471 4 0 4 4 0 8 0 filepl 160 1962 0 1768 10 0 10 10 0 8 0 lockfpl 104 20 0 18 1 0 1 1 0 8 0 lockfspl 48 11 0 9 1 0 1 1 0 8 0 sessionpl 144 37 0 22 1 0 1 1 0 8 0 pgrppl 48 55 0 33 1 0 1 1 0 8 0 ucredpl 104 209 0 191 1 0 1 1 0 8 0 zombiepl 144 472 0 470 1 0 1 1 0 8 0 processpl 1232 520 0 470 5 0 5 5 0 8 0 procpl 664 656 0 598 6 0 6 6 0 8 1 sockpl 752 244 0 216 5 0 5 5 0 8 1 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 133 0 0 17 0 17 17 0 8 0 mcl2k 2048 16 0 0 2 0 2 2 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 178 0 0 12 0 12 12 0 8 0 bufpl 272 4837 0 102 316 0 316 316 0 8 0 anonpl 32 7770 0 0 63 0 63 63 0 247 0 amapchunkpl 152 10535 0 9743 31 0 31 31 0 158 0 amappl16 200 1756 0 1737 5 2 3 5 0 8 1 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 403 0 402 1 0 1 1 0 8 0 amappl13 176 115 0 105 1 0 1 1 0 8 0 amappl12 168 809 0 776 2 0 2 2 0 8 0 amappl11 160 32 0 32 1 1 0 1 0 8 0 amappl10 152 57 0 47 1 0 1 1 0 8 0 amappl9 144 272 0 271 2 1 1 1 0 8 0 amappl8 136 97 0 96 1 0 1 1 0 8 0 amappl7 128 161 0 150 1 0 1 1 0 8 0 amappl6 120 154 0 153 1 0 1 1 0 8 0 amappl5 112 94 0 87 1 0 1 1 0 8 0 amappl4 104 262 0 247 1 0 1 1 0 8 0 amappl3 96 1928 0 1801 5 1 4 4 0 8 0 amappl2 88 521 0 470 2 0 2 2 0 8 0 amappl1 80 10867 0 10303 16 0 16 16 0 8 1 amappl 88 2916 0 2738 5 0 5 5 0 92 0 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 7 0 0 1 0 1 1 0 8 0 uaddrrnd 24 504 0 470 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 504 0 470 1 0 1 1 0 8 0 vmmpekpl 168 6206 0 6170 3 0 3 3 0 8 0 vmmpepl 168 41837 0 39904 103 0 103 103 0 357 18 vmsppl 488 503 0 470 7 1 6 6 0 8 1 rwobjpl 80 15204 0 14275 24 0 24 24 0 8 1 pdppl 4096 1015 0 940 107 26 81 97 0 8 6 pvpl 32 28275 0 0 230 1 229 229 0 265 0 pmappl 256 503 0 470 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 593 0 29 17 0 17 17 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8397dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83ada6c0) at __mp_lock+0x192 syscall(ffff800038394130) at syscall+0xaf4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73b17c084cd0, count: 9 ddb{0}> trace x86_ipi_db(ffffffff8397dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83ada6c0) at __mp_lock+0x192 syscall(ffff800038394130) at syscall+0xaf4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73b17c084cd0, count: -6 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff834bcfc0) at panic+0x1e5 __assert(ffffffff834f928a,ffffffff8344d301,4b7,ffffffff8344d336) at __assert+0x29 uvm_pageunwire(fffff180091e59e8) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffff1800f1893f8,370a1b40000,370a1f3f000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffff1800f1893f8,fffff1806cef3ec0,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffff1800f1893f8) at uvm_map_teardown+0x117 exit1(ffff800045fef770,0,0,1) at exit1+0x71b sys_exit(ffff800045fef770,ffff80002a32a1e0,ffff80002a32a130) at sys_exit+0x1a syscall(ffff80002a32a1e0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7bada49f91a0, count: 4 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff834bcfc0) at panic+0x1e5 __assert(ffffffff834f928a,ffffffff8344d301,4b7,ffffffff8344d336) at __assert+0x29 uvm_pageunwire(fffff180091e59e8) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffff1800f1893f8,370a1b40000,370a1f3f000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffff1800f1893f8,fffff1806cef3ec0,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffff1800f1893f8) at uvm_map_teardown+0x117 exit1(ffff800045fef770,0,0,1) at exit1+0x71b sys_exit(ffff800045fef770,ffff80002a32a1e0,ffff80002a32a130) at sys_exit+0x1a syscall(ffff80002a32a1e0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7bada49f91a0, count: -11