last executing test programs: 363.63744ms ago: executing program 7 (id=8): r0 = semget(0x3, 0x0, 0x401) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000000)=[0xfff3, 0x7, 0x5, 0x2, 0x1, 0xf5da, 0x2, 0x1, 0xfff7]) (async) r1 = semget(0x3, 0x1, 0x2) semctl$GETALL(r1, 0x0, 0x6, &(0x7f0000000040)=""/156) (async) syz_emit_ethernet(0x56, &(0x7f0000000100)={@broadcast, @empty, [], {@ipv4={0x800, {{0xd, 0x4, 0x3, 0x15, 0x48, 0x68, 0x8, 0x1, 0x29, 0x0, @empty, @rand_addr=0x10000, {[@noop, @generic={0x88, 0xa, "a708b02cd5dd81af"}, @rr={0x7, 0xf, 0x7, [@empty, @empty, @remote={0xac, 0x14, 0x0}]}, @noop, @rr={0x7, 0x3, 0x4}, @noop]}}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x3d7c, 0x1, 0x3, 0x10000, 0xa}}}}}) semop(r0, &(0x7f0000000180)=[{0x3, 0x8, 0x800}], 0x1) (async) r2 = openat$pci(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0) write(r2, &(0x7f0000000200)="88800bb437c88c4405080dc9bb7f7a952e85f5864503ef3fa4", 0x19) syz_extract_tcp_res(&(0x7f0000000240), 0x9, 0x0) (async) ioctl$PCIOCREAD(r2, 0xc0107002, &(0x7f0000000280)) semctl$GETPID(r0, 0x0, 0x4, &(0x7f00000002c0)=""/238) (async) r3 = socket(0x2, 0x5, 0x80) (async) r4 = shmget(0x1, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r4, 0x0) (async) semctl$GETVAL(r0, 0x0, 0x5, &(0x7f00000003c0)=""/45) (async) r5 = fcntl$dupfd(r3, 0xa, r2) ioctl$BIOCSRSIG(r5, 0x80044272, &(0x7f0000000400)=0x5) mprotect(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) r6 = semget$private(0x0, 0x1, 0x323) semctl$GETNCNT(r6, 0x0, 0x3, &(0x7f0000000440)=""/106) (async) r7 = shmget(0x3, 0x1000, 0x2, &(0x7f0000ff5000/0x1000)=nil) shmctl$IPC_RMID(r7, 0x0) (async) shmget$private(0x0, 0x11000, 0x484, &(0x7f0000fee000/0x11000)=nil) semctl$GETZCNT(r0, 0x0, 0x7, &(0x7f00000004c0)=""/250) r8 = accept$inet6(r5, &(0x7f00000005c0), &(0x7f0000000600)=0xc) writev(r8, &(0x7f0000000840)=[{&(0x7f0000000640)="97b773e4e5648ee838dea262dad226f7d55ba110903000831c0e59b1f945d3b0923205cd6e877674175bc8f6826d848451f9dcc003bca75453c38b0b6a1b614d22952ee35362b5011419cf0b632e7a8f7815a1e4ca6eb50699713fd3aad081f4e0c5cebcbcb3e409c7bed8353367920b281a195d59cadd940623914ce5f9f86eef8d30566cbe03a7ce8e5d443de53b3e10f191fd53de7859d457dfe84b059406902ecc98d9782825fb40da353bab20cec5e6b8b11c439709ace21cac0c4b461f815da0d8278f9bb56abd2c9d184ec39b36d4fc68a81103dbba6fbc7c06f3ddbf914d88b973de369250012c6bdaff3f136bd66405", 0xf4}, {&(0x7f0000000740)="132d1bca8ff1862da9d57ed0ff04793f0bb122a6567ff61636791b0e4ef5ce19906f24fd52e26debdf398dac5ab268b52a128665fc1b24eb765f1ef1816b96354dd192e3e9cd0e35bc9f6a815cccb8f36fe197c9941834d6e0c7b8c4b4d8d9a8b8f154bedc8a", 0x66}, {&(0x7f00000007c0)="0e05a21fb40cbbb4f61b7fe2d6a35addb81e48729a249e291c71524cc2a255f5d44a6949d1bf9182e8d19b146fa62c3e67e2e9035ac6540c1cd80d1247ea99809ed951a17c4b92fcc6228becc20b9ebeee3730aa8a077a", 0x57}], 0x3) socket$inet(0x2, 0x4000, 0x76) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) (async) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000880), 0x10, 0x0) 362.071818ms ago: executing program 3 (id=4): r0 = semget$private(0x0, 0x5, 0x3c0) semop(r0, &(0x7f0000000000)=[{0x0, 0x8, 0x1800}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x1000, 0x1000}], 0x1) semctl$SETVAL(r0, 0x4, 0x8, 0x0) 157.956493ms ago: executing program 7 (id=9): sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x11, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080)="b3ffc92492ca8df3a0cad2dfb5b6c10d770cd5f7fa17a8e4d61b4ed2e2c1128fb08b3ee751bae512b390ba7ae1a990dd431ec8a76e723e6484a5fa09abcf439bc2948fc354b45b81118aab10030f3839ad8599d0029a00", 0x0, 0x0, 0x689aa10a) (async) r0 = socket(0x2, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0, 0x100}, {r0, 0x4}, {r0, 0x20}], 0x3, 0x10001) (async) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x4, 0x6330}, {0x512a, 0xe75}}) (async) setsockopt(r0, 0x6, 0x4, &(0x7f0000000200), 0x0) 157.255771ms ago: executing program 3 (id=10): r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0x5d) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7fffffff, 0x0, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xd, &(0x7f00000000c0)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) setsockopt(r1, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4) dup2(r1, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 150.607616ms ago: executing program 6 (id=7): r0 = syz_open_pts() setrlimit(0x8, &(0x7f0000000040)={0x42, 0x62}) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r1 = syz_open_pts() r2 = syz_open_pts() writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1) close(r2) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSBRK(r0, 0x2000747b) execve(0x0, 0x0, 0x0) fcntl$getflags(r0, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0) read(r1, &(0x7f0000000300)=""/150, 0x96) 147.645296ms ago: executing program 7 (id=11): r0 = open(&(0x7f0000000000)='.\x00', 0x10000, 0xc5) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='r\x00') writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) lseek(0xffffffffffffffff, 0x3, 0x1) (async) unveil(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)='W\x00') unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='x\x00') (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='r\x00') 147.09222ms ago: executing program 7 (id=12): r0 = socket(0x2, 0x1, 0x0) shutdown(r0, 0x2) connect$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x2}, 0x8) accept$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) nanosleep(&(0x7f0000000340)={0x0, 0x9}, &(0x7f0000000380)) sysctl$kern(&(0x7f0000000900)={0x1, 0x34}, 0x2, &(0x7f0000000940), 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x52}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) 146.820448ms ago: executing program 4 (id=5): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x36, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 146.152145ms ago: executing program 2 (id=3): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSTOP(r0, 0x2000746f) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000040)) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000080)) mquery(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x0, r0, 0x0) close(r0) ioctl$TIOCMGET(r0, 0x4004746a, &(0x7f00000000c0)) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDSETLED(r1, 0x20004b42, &(0x7f0000000140)=0x3) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = openat$tty(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000200)={0x4, 0xad3, 0x4d8, 0x80, "4b8587e01fedd7ff615b1ed78df89a00d3fd5af8", 0x5, 0xe70}) readlinkat(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f00000002c0)) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TIOCSTART(r4, 0x2000746e) r5 = syz_open_pts() ioctl$TIOCSDTR(r3, 0x20007479) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000340)=0x1) linkat(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f00000003c0)='./file0\x00', 0x0) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000400)={0x80000000, 0xe43, 0x0, 0xc, "a13829aede564f8f65346ada28905ee09384de0b", 0xffff4207, 0x5}) ioctl$TIOCOUTQ(r4, 0x40047473, &(0x7f0000000440)=0x200) ioctl$TIOCSTOP(r4, 0x2000746f) ioctl$TIOCOUTQ(r4, 0x40047473, &(0x7f0000000480)=0x1) ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f00000004c0)={0xa04, [{0x1, 0x7}, {0x2, 0x4}, {0x1, 0x1c9ae6b4}, {0x1, 0xfffffc01}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0x57}, {0x3, 0x80000000}, {0x2, 0x18a00000}, {0x1, 0x6}, {0x2, 0x7}, {0x1, 0x46}, {0x1, 0x1}, {0x2, 0xabb}, {0x1, 0x8}, {0x3, 0x10001}, {0x1, 0x6}, {0x3, 0xfffffffa}, {0x3, 0x8}, {0x2, 0x2}, {0x2, 0xb}, {0x3, 0x6}, {0x1, 0x6}, {0x1, 0x100}, {0x2, 0x1}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x7}, {0x3, 0x1f4}, {0x3, 0x3}, {0x3, 0x3}, {0x2, 0xf94}]}) ioctl$TIOCGWINSZ(r5, 0x40087468, &(0x7f0000000600)) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000680)={0x0, 0x0}, 0xc) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) chown(&(0x7f0000000640)='./file0\x00', r6, r7) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000740)={0x8000, 0x0, 0x7, 0xa, "965f4542f85183245b1ec6b7c609a9a711a9c4b7", 0x6, 0x2}) 73.96234ms ago: executing program 4 (id=13): syz_emit_ethernet(0x2b, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @udp={{0x0, 0x2, 0x8}, {'\\'}}}}}}) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) r1 = shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB="e455e6463d0fbc1c6715e8d05de10000adc6c22acf57532a3616f61297099337f9d7be7ef2614370c6e3af077a96d0a733674f18927155b089d66f12a31e3264011aa1d0e9899c90a0abf0f871457f2afae901b953c4c68a306851308c5776adcfeae32badbe64ec80a239ad77d7796517798892c334396a9ac52803c22dbd4e25a6e77312a0deede2757be7037a5098debdc31b4381f9805e051042a454f1a0e81ce8b6eb18330020f9029930a304db2b96fa92348492eabdec247163e6c9b0a43d7da48c4ceb2a", @ANYRESHEX=r0]) 66.671466ms ago: executing program 4 (id=14): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) poll(0x0, 0x0, 0x0) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) pread(r1, &(0x7f0000000100)="7e02ab", 0x3, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = getpgid(0x0) setpgid(r2, 0x0) munlockall() r3 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000200)=0x6, 0x4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r5) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x401}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket(0x2, 0x2, 0x0) bind(r6, &(0x7f0000000000), 0x10) connect$unix(r6, &(0x7f0000000000), 0x10) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) recvfrom(r5, &(0x7f0000000240)=""/158, 0x9e, 0x802, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @broadcast, {[@timestamp={0x44, 0xc, 0x5, 0x2, 0x4, [{[], 0x88}, {[], 0x7ef}]}]}}}}}}) 63.751341ms ago: executing program 0 (id=1): syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @local, [], {@generic={0x8863}}}) r0 = socket(0x18, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xecdb1f631ef4aa36, 0x114) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f00000000c0), 0x0, 0x0, 0x0) 59.688599ms ago: executing program 4 (id=15): setrlimit(0x8, &(0x7f0000000040)={0x42, 0x62}) r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51}) syz_open_pts() kqueue() openat$null(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)={@broadcast, @random="9dad4d42febf", [], {@generic={0x88e7}}}) r3 = syz_open_pts() close(r3) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004a1b002800660001056c90780000f300000000000008a80000"]) r4 = syz_open_pts() msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/202) close(r4) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x7) ioctl$TIOCDRAIN(r3, 0x2000745e) 59.348694ms ago: executing program 4 (id=16): madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000004c0)={&(0x7f0000000340)={&(0x7f00000000c0)=@un=@abs, 0x8, &(0x7f0000000300), 0x2, &(0x7f00000003c0)=""/246, 0xf6}, 0xcddb}, 0xfffffe85, 0x42, &(0x7f0000000500)={0x80000000000, 0x8}) r2 = semget(0x2, 0x4, 0x61) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) r4 = geteuid() r5 = getgid() setregid(r5, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000140)={{0x7fffffff, r3, 0xffffffffffffffff, r4, r5, 0x0, 0x1fe}, 0xfffffffffffffff5, 0x4, 0x7c}) r6 = syz_open_pts() fcntl$lock(r6, 0x8, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffffe, 0x20001fffffffd}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff7e620e006dbd86dd60db83460008bb42fe0000204e20000800000000000000"]) 3.617675ms ago: executing program 7 (id=17): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x20, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e473e0000", 0x14) 0s ago: executing program 5 (id=6): r0 = socket(0x18, 0x2, 0x0) r1 = socket(0x1, 0x3, 0x6) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) r2 = accept$inet6(r1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x63) r4 = getpgid(0x0) fcntl$setown(r3, 0x6, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = syz_open_pts() fcntl$lock(r6, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) flock(r6, 0x1) flock(r6, 0x3) fcntl$lock(r6, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r7}}) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000180)=[{&(0x7f0000000080)="36c55dbbfe1b8c024f6265d60965fc407c6521d6817e5b979a05a94c9c441b0eb9fbb6d60e437d09bec1e21ee1c9593e58763f094d0e1c51db62b9d5c0f14ceba471d32816a5e68405001d8be5f33721683782625372e2da61dc09e8a94bb85793299202b0639a41c51dcd00f586d1b0ceed83d6d7adb89a5b623dd4f457a3441cce7b5b75c455d4409b9df462239bf7ed63f2051966cc51358f81fe5cdbfb2e137f809643f49400bb45acdeb31366613ccd64e372baa20a76b4ec65888b2676ee245576d2a3105b7e7b75f993378517c553340cea54f2", 0xd7}], 0x1, &(0x7f0000000240)=[@rights={0x18, 0xffff, 0x1, [r2]}, @cred={0x20, 0xffff, 0x0, r4, 0xffffffffffffffff, r7}], 0x38, 0x2}, 0x407) setsockopt(r0, 0x28, 0x6, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts. panic: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1741 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 396416 88933 32767 0x10 0 0 syz-executor *191519 88933 32767 0x10 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff8343de2e) at panic+0x1e5 __assert(ffffffff833eb2e6,ffffffff8342b2e2,6cd,ffffffff8333dde4) at __assert+0x29 uvm_fault_unwire_locked(fffffd8069f3c750,400000000000,400000003000) at uvm_fault_unwire_locked+0x4b4 uvm_fault_wire(fffffd8069f3c750,400000000000,400000021000,3) at uvm_fault_wire+0x12d sysctl_vslock(400000000080,202ff) at sysctl_vslock+0x109 net_sysctl(ffff80003a8db7a4,3,400000000080,ffff80003a8db7d8,0,0,928b31ecedbf284e) at net_sysctl+0x5a1 sys_sysctl(ffff8000374c2cf0,ffff80003a8db910,ffff80003a8db860) at sys_sysctl+0x425 syscall(ffff80003a8db910) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b4ec5df580, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1741 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8343de2e) at panic+0x1e5 __assert(ffffffff833eb2e6,ffffffff8342b2e2,6cd,ffffffff8333dde4) at __assert+0x29 uvm_fault_unwire_locked(fffffd8069f3c750,400000000000,400000003000) at uvm_fault_unwire_locked+0x4b4 uvm_fault_wire(fffffd8069f3c750,400000000000,400000021000,3) at uvm_fault_wire+0x12d sysctl_vslock(400000000080,202ff) at sysctl_vslock+0x109 net_sysctl(ffff80003a8db7a4,3,400000000080,ffff80003a8db7d8,0,0,928b31ecedbf284e) at net_sysctl+0x5a1 sys_sysctl(ffff8000374c2cf0,ffff80003a8db910,ffff80003a8db860) at sys_sysctl+0x425 syscall(ffff80003a8db910) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b4ec5df580, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003a8db4d0 rbx 0xffff800029a9cdc7 rdx 0 rcx 0xffff8000374c2cf0 rax 0xffff800029a9bff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x7175ed5c7d2ab6e1 r11 0x7b2b4510f2de143c r12 0xffff800029a9cbc8 r13 0 r14 0 r15 0x1 rip 0xffffffff816c87e5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003a8db4c0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=191519 pid=88933 tcnt=5 stat=onproc flags process=10 proc=4000000 runpri=36, usrpri=50, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000374c34a0,0xffff800038cca7e8 process=0xffff80002a489ba8 user=0xffff80003a8d6000, vmspace=0xfffffd8069f3c750 estcpu=22, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 88933 396416 2769 32767 7 0x10 syz-executor 88933 81031 2769 32767 2 0x4000010 syz-executor *88933 191519 2769 32767 7 0x4000010 syz-executor 88933 417235 2769 32767 2 0x4000010 syz-executor 88933 283891 2769 32767 2 0x4000010 syz-executor 46568 463553 47968 32767 2 0x10 syz-executor 46568 192469 47968 32767 3 0x4000090 lockf syz-executor 16861 155025 47858 0 2 0x100002 sh 74047 173530 50847 32767 2 0x10 syz-executor 74047 18554 50847 32767 3 0x4000090 fsleep syz-executor 36079 66242 32676 32767 2 0x10 syz-executor 36079 13362 32676 32767 3 0x4000090 fsleep syz-executor 28293 27979 91051 32767 2 0x10 syz-executor 28293 44464 91051 32767 3 0x4000090 fsleep syz-executor 28293 198489 91051 32767 3 0x4000090 fsleep syz-executor 60626 518416 19942 32767 2 0x10 syz-executor 60626 227212 19942 32767 2 0x4000010 syz-executor 60626 150038 19942 32767 3 0x4000090 fsleep syz-executor 4821 59810 46760 32767 2 0x10 syz-executor 4821 385280 46760 32767 3 0x4000090 fsleep syz-executor 4821 42174 46760 32767 3 0x4000090 fsleep syz-executor 4821 48469 46760 32767 3 0x4000090 fsleep syz-executor 2769 501338 90768 32767 3 0x90 nanoslp syz-executor 46760 147553 46034 32767 3 0x90 nanoslp syz-executor 47968 362222 38994 32767 3 0x90 nanoslp syz-executor 32676 498970 87826 32767 3 0x90 nanoslp syz-executor 19942 275911 51267 32767 3 0x90 nanoslp syz-executor 47858 164487 34054 0 3 0x80 wait syz-executor 91051 52286 60354 32767 3 0x90 nanoslp syz-executor 50847 441043 920 32767 3 0x90 nanoslp syz-executor 90768 128011 31141 0 3 0x82 wait syz-executor 46034 80278 31141 0 3 0x82 wait syz-executor 38994 357851 31141 0 3 0x82 wait syz-executor 87826 408195 31141 0 3 0x82 wait syz-executor 51267 258156 31141 0 3 0x82 wait syz-executor 60354 50522 31141 0 3 0x82 wait syz-executor 34054 178049 31141 0 3 0x82 wait syz-executor 920 481776 31141 0 3 0x82 wait syz-executor 31141 192411 37430 0 3 0x82 kqread syz-executor 37430 455085 62285 0 3 0x10008a sigsusp ksh 62285 59168 17369 0 3 0x98 kqread sshd-session 17369 59771 8668 0 3 0x92 kqread sshd-session 364 485093 1 0 3 0x100083 ttyin getty 8668 315780 1 0 3 0x88 kqread sshd 48641 168257 86152 73 3 0x1100090 kqread syslogd 86152 472396 1 0 3 0x100082 sbwait syslogd 16884 6037 1 0 3 0x100080 kqread resolvd 1576 73572 82757 77 3 0x100092 kqread dhcpleased 75330 522330 82757 77 3 0x100092 kqread dhcpleased 82757 44823 1 0 3 0x80 kqread dhcpleased 25191 520823 0 0 3 0x14200 bored smr 40361 475424 0 0 2 0x14200 zerothread 50984 87777 0 0 3 0x14200 aiodoned aiodoned 70241 151214 0 0 3 0x14200 syncer update 7897 300407 0 0 3 0x14200 cleaner cleaner 9136 456691 0 0 3 0x14200 reaper reaper 23834 180099 0 0 3 0x14200 pgdaemon pagedaemon 93052 424059 0 0 3 0x14200 bored viomb 95339 274552 0 0 3 0x40014200 acpi0 acpi0 16007 522679 0 0 3 0x40014200 idle1 54883 4420 0 0 3 0x14200 bored softnet3 311 31023 0 0 3 0x14200 bored softnet2 12494 340068 0 0 3 0x14200 bored softnet1 60714 215345 0 0 3 0x14200 bored softnet0 77327 454289 0 0 3 0x14200 bored systqmp 24829 342011 0 0 3 0x14200 bored systq 45205 218781 0 0 3 0x14200 tmoslp softclockmp 91103 107579 0 0 3 0x40014200 tmoslp softclock 40581 273234 0 0 3 0x40014200 idle0 1 261331 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 88933 (syz-executor) thread 0xffff8000374c3210 (396416) exclusive rwlock uobjlk r = 0 (0xfffffd8009b337d8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 uvm_fault_lower_lookup+0x53 #3 uvm_fault_lower+0x86 #4 uvm_fault+0x272 #5 upageflttrap+0xa9 #6 usertrap+0x2d8 #7 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd8069f3c850) #0 witness_lock+0x5bb #1 rw_do_enter_read+0x3af #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4b #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x2d8 #7 recall_trap+0x8 Process 88933 (syz-executor) thread 0xffff8000374c2cf0 (191519) exclusive rwlock amaplk r = 0 (0xfffffd8069ccbe68) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 uvm_map_lock_entry+0x51 #3 uvm_fault_unwire_locked+0x253 #4 uvm_fault_wire+0x12d #5 sysctl_vslock+0x109 #6 net_sysctl+0x5a1 #7 sys_sysctl+0x425 #8 syscall+0xbc6 #9 Xsyscall+0x128 shared rwlock vmmaplk r = 0 (0xfffffd8069f3c850) #0 witness_lock+0x5bb #1 rw_do_enter_read+0x3af #2 uvm_fault_wire+0x116 #3 sysctl_vslock+0x109 #4 net_sysctl+0x5a1 #5 sys_sysctl+0x425 #6 syscall+0xbc6 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838d08a0) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 sleep_finish+0x24f #4 rw_do_enter_read+0x2de #5 uvmfault_lookup+0x122 #6 uvm_fault_check+0x4b #7 uvm_fault+0x106 #8 uvm_fault_wire+0x73 #9 sysctl_vslock+0x109 #10 net_sysctl+0x5a1 #11 sys_sysctl+0x425 #12 syscall+0xbc6 #13 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff837eb878) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 sysctl_vslock+0x45 #3 net_sysctl+0x5a1 #4 sys_sysctl+0x425 #5 syscall+0xbc6 #6 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10183 10953K 10966K 166960K 11262 0 pcb 17 12K 12K 166960K 17 0 rtable 220 6K 6K 166960K 332 0 pf 31 16K 16K 166960K 31 0 ifaddr 40 7K 7K 166960K 42 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 1K 166960K 1 0 counters 64 36K 36K 166960K 64 0 ioctlops 0 0K 2K 166960K 28 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1332 84K 84K 166960K 1348 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 26 97K 117K 166960K 152 0 proc 58 79K 103K 166960K 469 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 2 0 in_multi 91 6K 6K 166960K 91 0 ether_multi 2 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 49 228K 228K 166960K 49 0 exec 0 0K 1K 166960K 342 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 250 78K 78K 166960K 2677 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 47 94K 112K 166960K 1167 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 2 0 NDP 25 1K 1K 166960K 25 0 temp 34 8678K 8742K 166960K 3697 0 kqueue 13 20K 20K 166960K 22 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 37 0 32 1 0 1 1 0 8 0 rtentry 112 104 0 1 3 0 3 3 0 8 0 unpcb 144 37 0 16 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 16 0 8 1 0 1 1 0 8 0 arp 120 18 0 0 1 0 1 1 0 8 0 inpcb 376 69 0 56 2 0 2 2 0 8 0 nd6 136 21 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 412 0 0 26 0 26 26 0 8 0 art_table 32 413 0 0 4 0 4 4 0 8 0 art_node 16 103 0 9 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 1 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1552 0 51 94 0 94 94 0 8 0 ffsino 280 1552 0 51 108 0 108 108 0 8 0 nchpl 144 1748 0 70 63 0 63 63 0 8 0 uvmvnodes 80 1633 0 0 34 0 34 34 0 8 0 vnodes 216 1633 0 0 91 0 91 91 0 8 0 namei 1024 5102 0 5102 2 0 2 2 0 8 2 percpumem 16 46 0 0 1 0 1 1 0 8 0 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 5694 0 5694 3 1 2 2 1 8 2 plimitpl 152 37 0 12 2 0 2 2 0 8 1 sigapl 424 431 0 375 7 0 7 7 0 8 0 futexpl 64 165 0 157 1 0 1 1 0 8 0 knotepl 120 58 0 0 2 0 2 2 0 8 0 kqueuepl 216 20 0 11 1 0 1 1 0 8 0 pipepl 328 101 0 74 3 0 3 3 0 8 0 fdescpl 504 413 0 375 7 1 6 6 0 8 0 filepl 152 1347 0 1121 9 0 9 9 0 8 0 lockfpl 104 11 0 6 1 0 1 1 0 8 0 lockfspl 48 7 0 3 1 0 1 1 0 8 0 sessionpl 144 21 0 5 1 0 1 1 0 8 0 pgrppl 48 30 0 6 1 0 1 1 0 8 0 ucredpl 104 99 0 81 1 0 1 1 0 8 0 zombiepl 144 375 0 375 1 0 1 1 0 8 1 processpl 1176 431 0 375 5 0 5 5 0 8 0 procpl 656 464 0 394 6 0 6 6 0 8 0 sockpl 688 143 0 104 4 0 4 4 0 8 0 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 130 0 0 17 0 17 17 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 142 0 0 9 0 9 9 0 8 0 bufpl 280 2236 0 124 151 0 151 151 0 8 0 anonpl 24 95310 0 92070 23 0 23 23 0 184 3 amapchunkpl 152 8149 0 7567 23 0 23 23 0 158 0 amappl16 200 1839 0 1825 5 0 5 5 0 8 4 amappl15 192 2 0 2 1 0 1 1 0 8 1 amappl14 184 101 0 91 1 0 1 1 0 8 0 amappl13 176 9 0 8 1 0 1 1 0 8 0 amappl12 168 1016 0 978 2 0 2 2 0 8 0 amappl11 160 45 0 35 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 0 1 1 0 8 1 amappl9 144 244 0 244 1 0 1 1 0 8 1 amappl8 136 19 0 18 1 0 1 1 0 8 0 amappl7 128 93 0 83 1 0 1 1 0 8 0 amappl6 120 175 0 170 1 0 1 1 0 8 0 amappl5 112 116 0 110 1 0 1 1 0 8 0 amappl4 104 274 0 261 1 0 1 1 0 8 0 amappl3 96 1271 0 1136 4 0 4 4 0 8 0 amappl2 88 595 0 543 2 0 2 2 0 8 0 amappl1 80 7470 0 6921 13 0 13 13 0 8 1 amappl 88 2341 0 2140 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 413 0 375 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 413 0 375 1 0 1 1 0 8 0 vmmpekpl 168 4918 0 4886 2 0 2 2 0 8 0 vmmpepl 168 31435 0 29431 89 0 89 89 0 357 0 vmsppl 456 412 0 375 7 1 6 6 0 8 0 rwobjpl 64 13686 0 11199 42 0 42 42 0 8 0 pdppl 4096 834 0 750 110 14 96 96 0 8 12 pvpl 32 9531 0 0 79 1 78 78 0 265 1 pmappl 248 412 0 375 4 1 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 279 0 17 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837c4ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838d0698) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff838d0698) at __mp_lock+0x192 syscall(ffff8000334b5450) at syscall+0xae6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76eebb5ea7d0, count: 6 ddb{0}> trace x86_ipi_db(ffffffff837c4ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838d0698) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff838d0698) at __mp_lock+0x192 syscall(ffff8000334b5450) at syscall+0xae6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76eebb5ea7d0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8343de2e) at panic+0x1e5 __assert(ffffffff833eb2e6,ffffffff8342b2e2,6cd,ffffffff8333dde4) at __assert+0x29 uvm_fault_unwire_locked(fffffd8069f3c750,400000000000,400000003000) at uvm_fault_unwire_locked+0x4b4 uvm_fault_wire(fffffd8069f3c750,400000000000,400000021000,3) at uvm_fault_wire+0x12d sysctl_vslock(400000000080,202ff) at sysctl_vslock+0x109 net_sysctl(ffff80003a8db7a4,3,400000000080,ffff80003a8db7d8,0,0,928b31ecedbf284e) at net_sysctl+0x5a1 sys_sysctl(ffff8000374c2cf0,ffff80003a8db910,ffff80003a8db860) at sys_sysctl+0x425 syscall(ffff80003a8db910) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b4ec5df580, count: 5 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8343de2e) at panic+0x1e5 __assert(ffffffff833eb2e6,ffffffff8342b2e2,6cd,ffffffff8333dde4) at __assert+0x29 uvm_fault_unwire_locked(fffffd8069f3c750,400000000000,400000003000) at uvm_fault_unwire_locked+0x4b4 uvm_fault_wire(fffffd8069f3c750,400000000000,400000021000,3) at uvm_fault_wire+0x12d sysctl_vslock(400000000080,202ff) at sysctl_vslock+0x109 net_sysctl(ffff80003a8db7a4,3,400000000080,ffff80003a8db7d8,0,0,928b31ecedbf284e) at net_sysctl+0x5a1 sys_sysctl(ffff8000374c2cf0,ffff80003a8db910,ffff80003a8db860) at sys_sysctl+0x425 syscall(ffff80003a8db910) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b4ec5df580, count: -10