last executing test programs: 2.036496809s ago: executing program 2 (id=3): select(0x40, &(0x7f0000000000)={0x6, 0x79, 0xf2, 0xffffffffffffa075, 0xfffffffffffffffe, 0x1000, 0x9, 0x5b2}, &(0x7f0000000040)={0x5, 0x5, 0x8, 0x7f, 0x3, 0x7, 0x19, 0x4}, 0xffffffffffffffff, &(0x7f0000000080)={0x7}) r0 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000100)) syz_emit_ethernet(0xd3, &(0x7f0000000140)={@random="b55ad5f99cad", @local, [{[], {0x8100, 0x6, 0x0, 0x2}}], {@generic={0x876d, "c7786198052764804bedaa0b0b5ce6bbbd62863a11c1cbc5502f95b8d6a195a7615a271e5c5cb5903c9137085e716af3099788a3347d2340cf2d90d55da7b39be03e70957c0a5e1af7b53269f8e3aba46f7e6416507534c4ea499c5970ab7ea7e2dfc7e8579b0aa55befd622837ef0f48af499dfe49bdf1cd17e682821378515fec1194885bafc56ec09f65af8fd69fd444320675ecc117e5f90bee79d7de06313b84e8f7627a95ee93e049b0f9802ce568313e64cab4e26acbea7231ecaa277b3"}}}) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x8, 0x26) r2 = openat(r1, &(0x7f0000000280)='./file0\x00', 0x2, 0x42) syz_extract_tcp_res(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x40, 0xff) syz_extract_tcp_res(&(0x7f0000000300)={0x41424344}, 0x64cc81da, 0x6) syz_emit_ethernet(0xbc, &(0x7f0000000340)={@random="323c39308bf3", @local, [], {@ipv4={0x800, {{0x13, 0x4, 0x3, 0x2f, 0xae, 0x66, 0x9, 0x7f, 0x3c, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2, {[@ssrr={0x89, 0x17, 0x81, [@multicast2, @remote={0xac, 0x14, 0x0}, @broadcast, @empty, @empty]}, @lsrr={0x83, 0x7, 0x4, [@rand_addr=0x9]}, @rr={0x7, 0xb, 0x3, [@loopback, @rand_addr=0x6]}, @lsrr={0x83, 0xf, 0x35, [@local={0xac, 0x14, 0x0}, @broadcast, @multicast1]}]}}, @tcp={{0x1, 0x3, r3, r4, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0xf, {[@nop, @nop]}}, {"dc19fec10819075acbcca4a4fd93f0b66cbb201a12a3c05aa665c21df16c9c76ba2fc089af0b0912d18d8b90ba4cb8662353013524026a290a25e3bd700070768f6d31a66f5dd53c76e6"}}}}}}) pread(r0, &(0x7f0000000400)="3cec0256f9421d6b4cf2ccb943f2096ae3bc9fcbf038b396d688acb8812d71d0c5f9b51125167e6bbf370e99892890a483894c270c819261a2f1454ccfb07ad04f457f6bcea187e7f63101ca16dfceb962d58ffb3b2483d9db7b4d94a4d06d7ffb4734be682883891d4979cb61d05dc1b2ba2681baf258943ef451f41e8a765e5ba5c717d96e3c8154c56b976ca7519854facf4e522fe190e19279ba49af401a851b41757704f5a1631a75f9af5c2737cd", 0xb1, 0x8) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f00000004c0)={0x5, 0x8, 0x7fffffff, 0x7, 0x4, 0x9, 0x6bd8, 0x10, [{0x400, 0x6, 0x8, 0xfffffffb}, {0x4, 0x4, 0x3, 0x8}, {0x9, 0x1ff, 0x0, 0x9cec}, {0x400, 0x1000, 0xf7, 0x6}, {0x3, 0xffff, 0x7, 0x6}, {0x1, 0x9, 0xf2, 0x2}, {0xfc64, 0x675, 0x1, 0x2}, {0x10, 0x39e1, 0x8}, {0x3, 0x39, 0x2, 0x1}, {0x8000, 0x0, 0x1}, {0x8, 0xffff, 0x5b979e5f, 0x40}, {0x6, 0x0, 0xd, 0x6}, {0x8, 0x8, 0x4, 0x4}, {0x5, 0x3, 0x1, 0x5}, {0x1, 0x0, 0xaf, 0x8}, {0x10000, 0x1000, 0x7, 0x2}]}) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0) r5 = accept$inet6(r2, &(0x7f0000000640), &(0x7f0000000680)=0xc) readv(r5, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/13, 0xd}, {&(0x7f0000000700)=""/250, 0xfa}, {&(0x7f0000000800)=""/122, 0x7a}, {&(0x7f0000000880)=""/179, 0xb3}, {&(0x7f0000000940)=""/53, 0x35}], 0x5) syz_extract_tcp_res(&(0x7f0000000a00), 0x3, 0xc) ioctl$TIOCGETA(r2, 0x402c7413, &(0x7f0000000a40)) write(r5, &(0x7f0000000a80)="7a8627d4a3e845029bd98c042d47bec4886d50f361a46d5d50b21523a5d261258f514666a895d95f50568289e4118aa5abb9657b1550f862110a6bf100c98a4d456473f7a625c050f9db9384f3c39d60e3b69bff6bfe2b8737dda0cf2e5f290afd55edb960057fa7e84942c64dddc1e8b7ec82ec1f5b14d0be70b610318817cf40157f44de26dd27f33ac45a8a1fe89c69e1612aeed972c7345cc2fe6503993f65f9f26ea63f62cc3485c40504515a9d8ea3268ad66d13fa5247acc9a076e2e54d86b5704a684be157bdd2bab389c2c712e4640f2c3ad130bb4abfb4952f080eef8abcc41594843616", 0xe9) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000b80)={0x1, 0xffff, 0x4, 0xf49, "6dea1ee6bea5a58ccfb4526df1901cb2befe4327", 0x0, 0x101}) syz_extract_tcp_res$synack(&(0x7f0000000bc0), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000c00)={0x41424344, 0x41424344}, 0x1, 0x0) ioctl$VMM_IOC_INFO(r2, 0xc0185603, &(0x7f0000000cc0)={0x63, 0x0, &(0x7f0000000c40)=""/99}) pipe2(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FIOSETOWN(r7, 0x8004667c, &(0x7f0000000d40)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000d80), 0x9e0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000dc0)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @local={0xac, 0x14, 0x0}, @empty, @remote={0xac, 0x14, 0x0}}}}}) syz_extract_tcp_res(&(0x7f0000000e00)={0x41424344, 0x41424344}, 0x3, 0x6) ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000e40)={0x7, 0x4800, 0x7ff, 0x8000, "d7aea49e1ecf5da63cc7cd6db9b66694ad75f8eb", 0x8, 0xfff}) ioctl$TIOCFLUSH(r7, 0x80047410, &(0x7f0000000e80)=0x5a81) syz_emit_ethernet(0xea, &(0x7f0000000ec0)={@random="22407ef729fd", @random="dbe4a5d92664", [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x3a, 0xdc, 0x65, 0xa5, 0x3, 0x62, 0x0, @empty, @loopback, {[@ra={0x94, 0x6, 0x5}]}}, @tcp={{0x0, 0x0, r6, r8, 0x1, 0x0, 0x8, 0x80, 0x4, 0x0, 0x1ff, {[@timestamp={0x8, 0xa, 0x3, 0x400}]}}, {"cb396301baf2a5197aa49383c887e2df6b39b66c5f9a55c4534b90fab2eb24157b7a3413680d84e0f4a30826238f1ff899aa199a6e74954c648339ddc8de5e78af8620ba7b172302fd00e776fff53583de6fcb2246cf47b7428465e7bd174d3fe00386499b37d7af9b73bc17074147755602f92ce28a36e0a2a92c078639ec6011852bf156f78ca78a65943eef065c4bfd908a7bf27e113113d64b4c3afcb245"}}}}}}) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000fc0)=0x9) 1.878701298s ago: executing program 6 (id=10): r0 = socket(0x11, 0x3, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/13, 0xd}, {&(0x7f00000001c0)=""/166, 0xa6}], 0x2, &(0x7f0000000340)=""/192, 0xc0}, 0x42) sendto$unix(r0, &(0x7f00000004c0)="b1000503000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d336acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000002013000000", 0xb1, 0x8, 0x0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') r1 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)="8a522c6b8a8460561e290ca762e8d6c739d5dd7f0153b7a50498cb60ab818b16929d3bf742c57351df76ca9ec87e92fa9f010342ace3a6ffcf", 0x39) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9) lseek(r1, 0x9, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe339d000000000000000000000000aa02009078000000006006c33e00003a80fe6700000000000000000000000000aaff0220000000000000000000000000010200000000000000ac132c8816f1467e3da28c7f3549de"]) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0504417, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt$sock_int(r2, 0xffff, 0x1004, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TIOCSETA(r4, 0xc2084415, &(0x7f0000000000)={0x345b, 0x2, 0x1, 0x0, "00000020000000000000000000c9fa00", 0x8, 0x52}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x80000001, 0x7, 0xd7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x3, 0x3}) setrlimit(0x7, &(0x7f0000000040)={0x7, 0x50}) r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r5, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) 1.875553724s ago: executing program 6 (id=11): r0 = semget$private(0x0, 0x4, 0x4c2) semctl$GETVAL(r0, 0x0, 0x5, &(0x7f0000000000)=""/145) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x408}, 0x4) sysctl$hw(&(0x7f0000000440)={0x6, 0x12}, 0x2, &(0x7f0000000480), 0x0, 0x0, 0x0) 1.867369496s ago: executing program 1 (id=2): sysctl$hw(&(0x7f0000000340)={0x6, 0xe}, 0x2, &(0x7f0000000380)="5d895e8d9f799d", &(0x7f0000000440)=0x7, 0x0, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x18, 0x1, 0x0) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$VMM_IOC_TERM(r1, 0x80045604, &(0x7f0000000380)={0x6}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x3, 0x6, 0x2, 0x5}, {0xa4, 0x9, 0x6, 0x1}, {0x3c56, 0x2, 0x36, 0x1}]}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) (async) pipe2(0x0, 0x4) (async) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1) (async, rerun: 64) socket(0x16, 0x2, 0x10) (rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x6ef}, 0x10, 0x1001, &(0x7f0000000300)={0x1, 0x83}) (async) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}) (async) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) syz_emit_ethernet(0x31, &(0x7f0000000180)={@broadcast, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x7, 0x23, 0x6, 0x0, 0x13, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1, {[@rr={0x7, 0x3}]}}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x65, 0x6, "0686fb"}}}}}) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) (async) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 1.86681098s ago: executing program 1 (id=12): r0 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0xa) socket(0x800000018, 0x2, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1}, {0x0, 0xfffffffc}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0xaa59}, {0x2}, {0x3, 0xffffffff}, {0x2}, {0x3, 0x4}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x7fff}, {0x2, 0x4}, {0x2, 0x1}, {0x2}, {0x0, 0xffffffff}, {0x3, 0x7ff}, {0x1}, {0x2}, {0x3}, {0x3, 0xfffffffd}, {}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2}, {0x1, 0xfff7fffd}, {0x1, 0xa}, {0x2}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETA(r3, 0xc2084415, &(0x7f0000000080)={0x200032, 0xa, 0x0, 0x81da, "97a21e0000000006eb8c03001cf042092b2dff00", 0x20000001, 0x9}) close(0xffffffffffffffff) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x100000000, 0x5, 0x7b98, 0x6, 0x0, 0x80000001], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8, 0x1, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}}) close(r2) socket(0x2, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000080), 0x93, &(0x7f0000000380), 0xfffb4161, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r5, 0xcd604404, &(0x7f0000000000)={0x10000000, 0x2, 0xfffffffe, 0x2f, "2800180000020002000000000068ab5ade800600", 0x6, 0x100002}) r6 = kqueue() kevent(r6, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) close(r6) socket(0x20, 0x5, 0x44) kqueue() ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0xfe6a, 0x2, 0x3, 0xffff7fff, "9ddc4160fe23b9816a00002f9e6883b30400", 0x6, 0x5}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x4) 1.866547493s ago: executing program 3 (id=4): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x33, &(0x7f0000000080)="031000006941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10c81a19096dc2baca0179cdd9967a674820f89c4daa330fee01c76728490d1851d4ab70059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82a28ebc2467003535184fc604fd6642787b31558a39bd200"/136, 0x88) r1 = semget(0x3, 0x2, 0x281) r2 = geteuid() r3 = getegid() r4 = getuid() setuid(r4) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000011c0)={{0x7fffffff, r2, r3, r4, 0x0, 0x89, 0x8}, 0xf3c, 0x1, 0x2}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r0, r2, r5) ktrace(0x0, 0x1, 0x4000040e, 0xffffffffffffffff) 1.770937394s ago: executing program 3 (id=13): r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000240)={0xfff, 0x6, 0x80000001, 0x1, "112beefa2f76d36eb07d22f97c6504c80c3bffe3", 0xfffffffd, 0xe}) readv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000380)=""/87, 0x56}, {&(0x7f0000000500)=""/41, 0x1d}, {&(0x7f0000000980)=""/124, 0x7c}, {&(0x7f0000000700)=""/134, 0x86}, {&(0x7f0000000580)=""/99, 0x6b}, {&(0x7f0000000480)=""/25, 0x19}, {&(0x7f0000000940)=""/14, 0xe}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f00000007c0)=""/158, 0x9e}], 0x9) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x2, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000a00)="5bed36d7cd682fbd53125d3132220efdd549ae540ef508a97650af6b97c4fedafc35c451c297bb846d81027d97ebf73507b01f5ef7c8e8d5193201d2aafe934e4cc0257bb7554e1e7889a55a5318bd7353a9a8a7f4ac5a6349f7ad9083618c19ebe403f841aa1ae41f2cdd2fb55cbefa76063fe738d7f7cf9a575ea8b00cb6daee3ae8c84a2d79485d", 0x89}], 0x1) mmap(&(0x7f0000152000/0x5000)=nil, 0x5000, 0x0, 0x5012, 0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x1, &(0x7f00000011c0)) munmap(&(0x7f0000000000/0xa000)=nil, 0xa000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getsockopt$sock_cred(r2, 0xffff, 0x1024, &(0x7f0000000300)={0x0}, &(0x7f00000002c0)=0xc) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ce, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) setpgid(r3, r3) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r5 = open(&(0x7f0000000080)='./bus\x00', 0x40, 0x83) ioctl$VNDIOCSET(r5, 0x80046478, &(0x7f0000000040)={0x0, 0x0, 0x0}) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x4, 0x9, 0xb, 0x5}, {0x9c, 0x9, 0x81, 0x1}, {0x3c56, 0x5, 0x6, 0x8}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) syz_open_pts() r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x30, 0x4, 0x3, 0xfff}]}) 1.769433642s ago: executing program 3 (id=14): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xd5, 0x0, 0x8, 0x100200000, 0x3, 0x8, 0xdf60, 0x5, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x20000000004, 0xfffffffffffffffe, 0x8000000000000001], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x6, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x8, 0x22, 0x5, 0xffffffbffffffff9}, {0x4, 0x4, 0xfffffffe, 0x80}, {0x2, 0x2, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x9, 0xe7, 0x2000000000000002}, {0x7f, 0x0, 0xfffffff9}, {0x0, 0x100, 0x6, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x9, 0x6d5, 0x4}}}) r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) close(r0) r1 = socket(0x11, 0x3, 0x0) fcntl$lock(r1, 0xb, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x100) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchmod(r2, 0x80) close(r2) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r3 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000080)=0x7) close(r3) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) select(0xffffffffffffff87, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x408) ioctl$WSKBDIO_GETMAP(r2, 0xc010570d, &(0x7f0000000340)={0x2, &(0x7f00000000c0)=[{0x81, 0x231d, 0x1, 0xe, 0x995}, {0x0, 0x9, 0x5, 0x1, 0x8000}]}) r4 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0206922, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1.74698373s ago: executing program 7 (id=8): sysctl$kern(0x0, 0x0, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa7feffffff5fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef2", 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x8000, 0x285b9a) r0 = open(&(0x7f0000000800)='./file1\x00', 0x80, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x3) setrlimit(0x8, &(0x7f00000008c0)={0x3f, 0x61}) sysctl$hw(&(0x7f00000000c0)={0x6, 0x18}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x7412b83d83662d9b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000002c0), &(0x7f0000000080)=0x1a, 0x0, 0x0) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() writev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)="4b065dee9476aa7c4a0c074406cbc6338de5678b0b5c971e0d", 0x19}], 0x1) readv(r2, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x2) 1.746677077s ago: executing program 6 (id=15): r0 = socket(0x800000018, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setsockopt(r0, 0x7, 0x1b, &(0x7f0000000000)="a219c75b", 0x4) accept(r0, &(0x7f0000000040)=@in6, &(0x7f00000000c0)=0xc) 1.745648528s ago: executing program 6 (id=16): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) r0 = socket(0x2, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040)=0xf, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r0, &(0x7f0000000000), 0x10) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1006, 0x0, 0x0) (async) sendmmsg(r0, &(0x7f0000000200)={0x0, 0x8000}, 0x10, 0x5) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79ea) writev(r1, &(0x7f00000000c0), 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0x80184901, &(0x7f0000000180)={0x400, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sysctl$vfs_nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="e7", 0x1) sendmsg(r3, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1.726955849s ago: executing program 0 (id=1): setitimer(0x0, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) (async) 1.662406491s ago: executing program 0 (id=17): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) semget(0x3, 0x1, 0x408) (async) r0 = semget(0x0, 0x1, 0x281) semctl$SETALL(r0, 0x0, 0x9, &(0x7f00000001c0)) (async) semop(r0, 0x0, 0x13) execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='///'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) socket(0x18, 0x3, 0x0) (async) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218}, {&(0x7f00000002c0)=""/70}, {&(0x7f0000000340)=""/106}], 0x100000000000039d, 0x0}, 0x0) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) write(r1, 0x0, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x9, 0x406}, 0x5) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000280)={0x312, 0x5, 0x40, 0xffff9400, "0ddf37f76ae63be50759c88abac4cc99a5830321", 0x4f}) close(r3) (async) getppid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sysctl$vfs_nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="e7", 0x1) sendmsg(r5, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) 1.662038367s ago: executing program 4 (id=5): sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x2, 0x1}, 0x3, 0x0, &(0x7f0000001940), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x9, 0x0, 0xffe}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), 0xc) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) poll(&(0x7f0000000140)=[{r2, 0x10}], 0x1, 0x10) sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000940), &(0x7f0000001940), 0x0, 0x0) 1.659786915s ago: executing program 7 (id=18): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) open(&(0x7f00000000c0)='./file0\x00', 0x30401, 0x6e) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) truncate(&(0x7f0000000040)='./file0\x00', 0x6000000000) 1.659301638s ago: executing program 7 (id=19): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0x84946466, &(0x7f0000000140)={0x0, 0x567, 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000280)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x6, 0x1, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback}}}}}}}) 1.654048847s ago: executing program 2 (id=20): mlockall(0x1) open(&(0x7f0000000380)='./file0\x00', 0x20, 0x4ebfac6bbaf7822) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x58}, 0x2, 0x0, 0x0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x3c, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/1}], 0x1) execve(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000240)='\\\xfc)--\x00', &(0x7f0000000280)='^$,\x00'], &(0x7f0000000600)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='@\x00', &(0x7f00000003c0)='%@\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='}#\x00', &(0x7f0000000480)='-(\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='!x+\'&:^^\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00']) setrlimit(0x6, &(0x7f0000000680)={0x80000000, 0x1ff}) mlockall(0x1) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)="9b7c9cb129831a57fb75f51dec14462c3e905a14cad36d1667036d2e4f00a6b782f4e5baf4a5e4e9f7312ed73d3b08c42aae58b8a2dcf960475fe2a25f5290608fcdb503bd67177207cef4d737f5fdfc262b775cddd1efd15849191b6c65554c7343ea82449a863eb1dc09355537d2b0b8872b24", 0x74}, {&(0x7f0000000140)="cb046c588e3f2e13aad476b5f1136a9aaf79c5014ea85acdd30e7bc11242476e86b0e51355ae3ab8576c14e65c4f04b95bf915b0488ed334dc7b68969c97102a9c7d516076d699bad04c488f7d608fcb98827e19148519acfdc78d0b5fa32f3dd9d0b18cfdb52d67e7458e6f940949a5f8fbd1b3bfd550097bb87a1b0e995dae3ac52471256cd0d27353c411bb", 0x8d}], 0x2) 1.083044721s ago: executing program 7 (id=21): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0x1712, 0xa, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0xfffffffffffffffe, 0x67569535, 0x2f01, 0x4, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x100], [0xa, 0x80000001, 0xf, 0x8000, 0xfffffffffffffffc, 0x1, 0x10000001fe, 0x9, 0x0, 0x2], [0x120000001, 0x2, 0x3, 0x0, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7ffffffffffffffe, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x20000004, 0x0, 0x2}, {0xfffc, 0x2, 0x5}, {0x4, 0x2, 0xffffffff, 0x80}, {0x3, 0x5, 0x4, 0xfffffffffffffffe}, {0x6, 0x200, 0x1000, 0x2000000008}, {0x0, 0x2003, 0xa8d, 0x2000000000000000}, {}, {0x0, 0xbd12, 0x0, 0x2}], {0x0, 0x5, 0x800005}, {0x4, 0x80000000, 0x6d5, 0x2}}}) socket$inet(0x2, 0x3, 0x8f) r0 = socket(0x800000018, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockname$unix(r0, 0x0, &(0x7f00000010c0)) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1ffd, 0x2) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x27}], 0x1, 0x0) flock(r1, 0x1) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000000)={0x2d757366, 0x27, 0x7, 0xffffffed, "0a6400b72860147b00", 0x7, 0x100000e}) writev(r2, &(0x7f0000000380)=[{&(0x7f00000009c0)="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", 0x4d4}], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="11e75aa5de79fc7ff6f2d84be662641cd8137cb54f3f914a60361e049f7727edeb899f03c645b29d26be7a0392746139a7aa757b70334ed754a5ac054fbc6dc40583e905ffec9ce0bbb6f6f1ad97271d7cf946a008b805551b602b", 0x5b}], 0x1, 0x0, 0xe0}, 0x1}, 0x10, 0x800) syz_emit_ethernet(0xda, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b1000cc00000000000d9078ffffffffe0000002010bec9bdb9331cd9e145d831f0fe00c0002000000007f0000017f000001e0000002e0000001e000000107070fe0000001441c02537f00000100000008000000000000b920e0000001000000044408d03300000005000000dd7e45909dda809ddda20dff7b522fed97dbfa06095d2cf27c235172b46eeb96f71696169b820aa36ab6179c22b5b55fe4e0720624b01e4c0cd83ceb170900000061868cdf45db4f8ee25c60c08c739a46ee1a4b888c32da19a266bfbd5e41ba"]) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd609ded1a12390000c4a4e3434e58d025a6a8a81cf312b8befe8000000000000000000000000000aa00030000000000000101000101000401000401000103000000000100010200000000c7ab6f1eba08bf03d1805fce0ef2ab82f4a065245eccda108bec7cb23f632c993265a4cefeb77b1406d562a47d4b0054943553278b519ed107f62b5c352f8e68d83c1fd85b8e1083556d7fa2fc09a3e823fa940de6ef1b18ddb2a2dba0d2d9c1b44b20ed3a932a2c47f4f4d3e34ea1b67a607001a4541a87d5d347b5049b3444dc2b7abe3499079a5701e88493acb2eb1808e8b1f74311083f93341607915aa46325934e81b672d809cb6bc5f3d64480ba4db4432a67c2548e259fe7831f7c6dfe"]) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x7, 0xff, 0x1, 0x1}, {0x2d, 0x1, 0x2, 0x1}, {0x8, 0x8, 0x6, 0x3}, {0x7, 0xff, 0x9, 0x1}, {0x9b1e, 0x82, 0x84, 0x40007ff}]}) sysctl$kern(&(0x7f0000000040)={0x1, 0x57}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000040)=ANY=[]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r5 = socket(0x18, 0x3, 0x85) ioctl$FIONREAD(r5, 0xc1206949, &(0x7f00000001c0)) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0xce) 1.082184886s ago: executing program 6 (id=22): semget(0x0, 0x1, 0x281) (async) r0 = semget(0x0, 0x1, 0x281) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x200}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000080)=0x9) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="b273a18160be077e7ecce2945464df218ec9aa8b737dc1b3411461b170f76b77bd1a56ba8ad5f7492176f8375d400405e2b2ee7d68f88b4ea4c2b27d0bc9fae1f2c21d0eba8d56f4521d6955742e949efdbbee54b622b172bc717ef5caf6247116cab6a52f47fdfb62a35f5018c434a42434e231260bb0b7f6862e22506ce03a3338a39234852453ec32263076676e27f639a6afe393626e5b4691620cd3b139635ab19041cce7bf97670efb78d1f742c0f94afd5806e19d0301ef0a0dd5e1835ee1b109d3c143905fc20eb579df734d7f8adebd8cdd0a", 0xd7}], 0x1) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="b273a18160be077e7ecce2945464df218ec9aa8b737dc1b3411461b170f76b77bd1a56ba8ad5f7492176f8375d400405e2b2ee7d68f88b4ea4c2b27d0bc9fae1f2c21d0eba8d56f4521d6955742e949efdbbee54b622b172bc717ef5caf6247116cab6a52f47fdfb62a35f5018c434a42434e231260bb0b7f6862e22506ce03a3338a39234852453ec32263076676e27f639a6afe393626e5b4691620cd3b139635ab19041cce7bf97670efb78d1f742c0f94afd5806e19d0301ef0a0dd5e1835ee1b109d3c143905fc20eb579df734d7f8adebd8cdd0a", 0xd7}], 0x1) semop(r0, &(0x7f0000000000), 0x23) semctl$SETALL(r0, 0x0, 0x9, 0x0) (async) semctl$SETALL(r0, 0x0, 0x9, 0x0) 9.268305ms ago: executing program 4 (id=23): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71dc0", 0x95, 0x4, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x20) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 8.402989ms ago: executing program 4 (id=24): syz_emit_ethernet(0x32, &(0x7f0000000180)={@remote, @random, [], {@arp={0x806, @generic={0x1, 0x3c00, 0x6, 0x0, 0x4, @empty, "", @broadcast, "47f201b1e1ee1d8b0c285c7cc50632f6"}}}}) (async) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) (async) r0 = syz_open_pts() close(r0) (async) sysctl$hw(&(0x7f0000000040)={0x6, 0x13}, 0x2, &(0x7f00000000c0)="254c0b4b6a9bb3d2", &(0x7f0000000180)=0x8, &(0x7f00000001c0), 0x0) (async) syz_open_pts() (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x40978b, 0x10001, 0xfffffc01, 0x80a1a4, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0xffffffff}) (async) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000001c0)=0x1) syz_emit_ethernet(0xa5, &(0x7f0000000200)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x97, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x64, 0x0, "12a3626c5e54ff90f81ab8782b76f18f68ce210cc3a2fa585ea9334c88313db7ce6fa3e305b4f122ee9acc4bd9f809f25f6dec49987055077e0eb9549f478bcb7c085be233916c54cd963b45f1b7555b8996ec3ff9dfc538d277c6dfcaf41504d5197448af122218366699299b665727e916ba408feea2059540a2"}}}}}) 6.687508ms ago: executing program 0 (id=25): syz_emit_ethernet(0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078fffffffc6000000000002b00fe8040640000000000000000000000aaff0200000000000000000000000000010100000000000000"]) ktrace(0x0, 0x0, 0x40000534, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x0, 0x80, 0x4000000000000006}], 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000140)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000000200), 0x0) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='c\x00') sysctl$hw(&(0x7f0000000040)={0x7, 0x10}, 0x2, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x4}, 0x4, &(0x7f00000000c0), &(0x7f0000000000), 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x10) read(r0, &(0x7f0000000100)=""/254, 0xfe) 2.591239ms ago: executing program 5 (id=6): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x68, 0xffff, 0x400, "19c4afd1cac3477791d07316e84bfdf4bc47c7a758f713b2081d4d455e8223ea9d24f6ee86211c7a3ea9f251aaa9f09f3d61f46fa61b3cb4ae5c8e79bc72ceb51f15bbd9c814efba5c14f9601ce3e866c2af"}], 0x68}, 0x40a) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7f, 0x0, 0x0, 0x0, 0x0, 0x1ad, 0x7}, 0x85c, 0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x1735, 0x8000004}) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async, rerun: 64) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (async, rerun: 64) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x2, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffff0600", 0x4, 0x4}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async) r2 = socket$inet(0x2, 0x3, 0xfc) chroot(&(0x7f0000000100)='./file0\x00') ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) 0s ago: executing program 6 (id=26): lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) close(r1) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r1, 0x0) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='r\x00') r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r3 = shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x2000) shmdt(r3) r4 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) shmdt(r3) r5 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r5, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0)) r6 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r6, 0x8020690e, &(0x7f00000001c0)) shmdt(r3) ioctl$TIOCSETA(r0, 0xc008441e, &(0x7f0000000040)={0xaa, 0x2030, 0x4009, 0x200, "d00ecca7bad0be9900", 0x4, 0x938}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. pmap_unwire: wiring for pmap 0xfffffd806c736400 va 0x452497df000 didn't change! panic: kernel diagnostic assertion "pg->wire_count != 0" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1250 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 197370 11527 0 0x2 0 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff833acf96) at panic+0x1e5 __assert(ffffffff833f0a7c,ffffffff833e1039,4e2,ffffffff83340b64) at __assert+0x29 uvm_pageunwire(fffffd80091cacb8) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffffd806c7377c0,452497df000,45249bde000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffffd806c7377c0,fffffd80691f9a00,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffffd806c7377c0) at uvm_map_teardown+0x117 exit1(ffff80002efc4028,0,0,1) at exit1+0x6fc sys_exit(ffff80002efc4028,ffff80003c423120,ffff80003c423070) at sys_exit+0x1a syscall(ffff80003c423120) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75dc1a5d9500, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "pg->wire_count != 0" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1250 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833acf96) at panic+0x1e5 __assert(ffffffff833f0a7c,ffffffff833e1039,4e2,ffffffff83340b64) at __assert+0x29 uvm_pageunwire(fffffd80091cacb8) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffffd806c7377c0,452497df000,45249bde000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffffd806c7377c0,fffffd80691f9a00,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffffd806c7377c0) at uvm_map_teardown+0x117 exit1(ffff80002efc4028,0,0,1) at exit1+0x6fc sys_exit(ffff80002efc4028,ffff80003c423120,ffff80003c423070) at sys_exit+0x1a syscall(ffff80003c423120) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75dc1a5d9500, count: -11 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c422d40 rbx 0xffff8000299dee07 rdx 0 rcx 0xffff80002efc4028 rax 0xffff8000299ddff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xe2f10b78169d6e0c r11 0x447484da4d5bf93 r12 0xffff8000299dec08 r13 0 r14 0 r15 0x1 rip 0xffffffff82c74e85 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c422d30 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=303294 pid=18011 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=53, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002efc4028 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003a7f8550,0xffff80002efc42d0 process=0xffff8000343da6a0 user=0xffff80003c41e000, vmspace=0xfffffd806c7377c0 estcpu=3, cpticks=4, pctcpu=0.1, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 90412 94678 22452 0 2 0 syz-executor 74334 261347 11527 0 2 0 syz-executor 74334 426368 11527 0 2 0x4000000 syz-executor 43599 254990 40882 0 3 0x3000 suspend syz-executor 43599 71420 40882 0 2 0x4081000 syz-executor 43599 239359 40882 0 2 0x4081000 syz-executor 43599 482478 40882 0 2 0x4081000 syz-executor 42043 387482 42428 0 2 0 syz-executor 42043 9620 42428 0 3 0x4000080 fsleep syz-executor 4565 382065 30149 0 2 0 syz-executor 4565 200079 30149 0 3 0x4000000 inode syz-executor 4565 289705 30149 0 2 0x4000000 syz-executor 31411 427088 18200 0 2 0 syz-executor 31411 416919 18200 0 3 0x4000080 kqsel syz-executor 31411 127058 18200 0 3 0x4000080 kqsel syz-executor 31411 342811 18200 0 3 0x4000080 fsleep syz-executor 42428 170710 70275 0 3 0x82 nanoslp syz-executor 11527 197370 70275 0 7 0x2 syz-executor 71676 59462 70275 0 2 0x2 syz-executor 40882 161579 70275 0 2 0x2 syz-executor 30149 365397 70275 0 3 0x82 nanoslp syz-executor 98636 117642 70275 0 2 0xc82 syz-executor 18200 187368 70275 0 2 0xc82 syz-executor 22452 280643 70275 0 3 0x82 nanoslp syz-executor 70275 521748 76006 0 3 0x82 kqread syz-executor 76006 13195 32166 0 3 0x10008a sigsusp ksh 32166 322763 63228 0 3 0x98 kqread sshd-session 63228 249047 38876 0 3 0x92 kqread sshd-session 58162 171523 1 0 3 0x100083 ttyin getty 38876 412446 1 0 3 0x88 kqread sshd 75535 167500 91987 74 3 0x1100092 bpf pflogd 91987 282405 1 0 3 0x80 sbwait pflogd 54740 290659 89413 73 3 0x1100090 kqread syslogd 89413 136212 1 0 3 0x100082 sbwait syslogd 18264 91405 1 0 3 0x100080 kqread resolvd 66730 47188 66221 77 3 0x100092 kqread dhcpleased 66563 475690 66221 77 3 0x100092 kqread dhcpleased 66221 341297 1 0 3 0x80 kqread dhcpleased 33207 513453 0 0 3 0x14200 bored smr 71404 73780 0 0 2 0x14200 zerothread 58947 17491 0 0 3 0x14200 aiodoned aiodoned 35812 52949 0 0 3 0x14200 syncer update 95887 394065 0 0 3 0x14200 cleaner cleaner 47693 319517 0 0 3 0x14200 reaper reaper 72454 389107 0 0 3 0x14200 pgdaemon pagedaemon 53427 132383 0 0 3 0x14200 bored viomb 45273 69054 0 0 3 0x40014200 acpi0 acpi0 87625 132810 0 0 3 0x40014200 idle1 4397 369043 0 0 3 0x14200 bored softnet1 212 38786 0 0 3 0x14200 bored softnet0 5239 510772 0 0 3 0x14200 bored systqmp 82305 330844 0 0 3 0x14200 bored systq 805 140574 0 0 3 0x14200 tmoslp softclockmp 88204 86795 0 0 3 0x40014200 tmoslp softclock 21540 78393 0 0 3 0x40014200 idle0 1 224106 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 4565 (syz-executor) thread 0xffff80003a7f8550 (289705) exclusive rrwlock inode r = 0 (0xfffffd8069309458) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11055 12093K 12149K 166960K 12156 0 pcb 17 12K 12K 166960K 18 0 rtable 245 7K 7K 166960K 376 0 pf 34 17K 18K 166960K 40 0 ifaddr 43 7K 7K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 1467 0 iov 0 0K 0K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1337 84K 84K 166960K 1368 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 6 0K 0K 166960K 9 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 89K 166960K 156 0 proc 70 115K 196K 166960K 531 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 49 228K 228K 166960K 49 0 exec 0 0K 1K 166960K 387 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 243 169K 180K 166960K 3401 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 41 82K 104K 166960K 1315 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 7 0 NDP 12 0K 2K 166960K 28 0 temp 35 8674K 8738K 166960K 4206 0 kqueue 16 24K 26K 166960K 31 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 39 0 35 1 0 1 1 0 8 0 rtentry 176 112 0 1 6 0 6 6 0 8 0 unpcb 144 45 0 28 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 20 0 14 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 86 0 73 2 0 2 2 0 8 0 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfrule 1360 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 454 0 0 5 0 5 5 0 8 0 art_node 32 112 0 11 1 0 1 1 0 8 0 semapl 112 5 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1591 0 79 95 0 95 95 0 8 0 ffsino 296 1591 0 79 117 0 117 117 0 8 0 nchpl 144 1811 0 116 63 0 63 63 0 8 0 vnodes 216 1682 0 0 94 0 94 94 0 8 0 namei 1024 5501 0 5501 2 0 2 2 0 8 2 percpumem 16 50 0 0 1 0 1 1 0 8 0 kstatmem 264 26 0 0 2 0 2 2 0 8 0 scxspl 216 6041 0 6041 3 2 1 2 1 8 1 plimitpl 152 35 0 14 1 0 1 1 0 8 0 sigapl 424 474 0 427 7 0 7 7 0 8 0 knotepl 120 303 0 0 10 0 10 10 0 8 0 kqueuepl 224 28 0 14 1 0 1 1 0 8 0 pipepl 344 123 0 95 3 0 3 3 0 8 0 fdescpl 528 458 0 428 3 0 3 3 0 8 0 filepl 160 1636 0 1410 10 0 10 10 0 8 0 lockfpl 104 12 0 10 1 0 1 1 0 8 0 lockfspl 48 7 0 5 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 32 0 15 1 0 1 1 0 8 0 ucredpl 104 96 0 83 1 0 1 1 0 8 0 zombiepl 144 429 0 427 1 0 1 1 0 8 0 processpl 1232 474 0 427 5 0 5 5 0 8 0 procpl 664 514 0 457 6 0 6 6 0 8 0 sockpl 752 171 0 137 5 0 5 5 0 8 1 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 129 0 0 17 0 17 17 0 8 0 mcl2k 2048 29 0 0 4 0 4 4 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 141 0 0 9 0 9 9 0 8 0 bufpl 280 4945 0 130 344 0 344 344 0 8 0 anonpl 32 8560 0 0 70 0 70 70 0 246 0 amapchunkpl 152 9642 0 8891 31 0 31 31 0 158 0 amappl16 200 1967 0 1923 5 1 4 5 0 8 1 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 9 0 9 1 1 0 1 0 8 0 amappl13 176 434 0 433 1 0 1 1 0 8 0 amappl12 168 827 0 786 3 0 3 3 0 8 0 amappl11 160 14 0 14 1 1 0 1 0 8 0 amappl10 152 51 0 36 1 0 1 1 0 8 0 amappl9 144 266 0 265 1 0 1 1 0 8 0 amappl8 136 32 0 30 1 0 1 1 0 8 0 amappl7 128 83 0 82 1 0 1 1 0 8 0 amappl6 120 289 0 276 1 0 1 1 0 8 0 amappl5 112 91 0 81 1 0 1 1 0 8 0 amappl4 104 428 0 398 1 0 1 1 0 8 0 amappl3 96 1433 0 1340 4 1 3 3 0 8 0 amappl2 88 574 0 503 2 0 2 2 0 8 0 amappl1 80 9522 0 8936 15 0 15 15 0 8 1 amappl 88 2635 0 2470 5 0 5 5 0 92 0 uvmvnodes 80 99 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 458 0 427 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 458 0 427 1 0 1 1 0 8 0 vmmpekpl 168 5691 0 5651 2 0 2 2 0 8 0 vmmpepl 168 37856 0 35950 92 0 92 92 0 357 2 vmsppl 488 457 0 427 5 0 5 5 0 8 0 rwobjpl 80 14134 0 13102 24 0 24 24 0 8 0 pdppl 4096 924 0 854 100 20 80 86 0 8 10 pvpl 32 30070 0 0 243 0 243 243 0 265 0 pmappl 256 457 0 427 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 272 0 22 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837bfff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a17340) at __mp_lock+0x192 syscall(ffff80002a39c140) at syscall+0xaf4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x738256e26710, count: 9 ddb{0}> trace x86_ipi_db(ffffffff837bfff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a17340) at __mp_lock+0x192 syscall(ffff80002a39c140) at syscall+0xaf4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x738256e26710, count: -6 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833acf96) at panic+0x1e5 __assert(ffffffff833f0a7c,ffffffff833e1039,4e2,ffffffff83340b64) at __assert+0x29 uvm_pageunwire(fffffd80091cacb8) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffffd806c7377c0,452497df000,45249bde000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffffd806c7377c0,fffffd80691f9a00,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffffd806c7377c0) at uvm_map_teardown+0x117 exit1(ffff80002efc4028,0,0,1) at exit1+0x6fc sys_exit(ffff80002efc4028,ffff80003c423120,ffff80003c423070) at sys_exit+0x1a syscall(ffff80003c423120) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75dc1a5d9500, count: 4 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833acf96) at panic+0x1e5 __assert(ffffffff833f0a7c,ffffffff833e1039,4e2,ffffffff83340b64) at __assert+0x29 uvm_pageunwire(fffffd80091cacb8) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffffd806c7377c0,452497df000,45249bde000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffffd806c7377c0,fffffd80691f9a00,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffffd806c7377c0) at uvm_map_teardown+0x117 exit1(ffff80002efc4028,0,0,1) at exit1+0x6fc sys_exit(ffff80002efc4028,ffff80003c423120,ffff80003c423070) at sys_exit+0x1a syscall(ffff80003c423120) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75dc1a5d9500, count: -11