last executing test programs: 2.010684237s ago: executing program 1 (id=127): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000746000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x200007fffffffffd}, {&(0x7f0000e4e000/0x4000)=nil, &(0x7f0000417000/0x3000)=nil}, {&(0x7f00003d9000/0x2000)=nil, &(0x7f0000aa5000/0x2000)=nil}, {&(0x7f00002a8000/0x1000)=nil, &(0x7f00000d6000/0x1000)=nil, 0x41}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f0000034000/0x1000)=nil, &(0x7f0000331000/0x2000)=nil, 0x2000000000000007}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00000bf000/0x3000)=nil, 0x8}, {&(0x7f0000096000/0x2000)=nil, &(0x7f0000e4d000/0x3000)=nil, 0x4}, {&(0x7f000032e000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00004e5000/0x7000)=nil, &(0x7f0000632000/0x4000)=nil, 0x10000}, {&(0x7f0000196000/0x4000)=nil, &(0x7f00004e6000/0x3000)=nil, 0x1b}, {&(0x7f0000074000/0x4000)=nil, &(0x7f0000688000/0x4000)=nil, 0xfffffffc}, {&(0x7f000055e000/0x2000)=nil, &(0x7f0000689000/0x2000)=nil, 0x6}, {&(0x7f00001c8000/0x2000)=nil, &(0x7f000053a000/0x1000)=nil, 0xfffffffffffffff8}, {&(0x7f0000318000/0x3000)=nil, &(0x7f000068b000/0x2000)=nil, 0x2000001000039f7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000073000/0x7000)=nil, 0x5}], './file0\x00', 0xfffffffa}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffb, 0x210002fffffffe}) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) r4 = socket(0x2, 0x2, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt(r5, 0x0, 0x4, &(0x7f0000000040)="ffffffff", 0x4) connect$unix(r4, &(0x7f0000000000), 0x10) r6 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) r7 = socket(0x2, 0x4001, 0x0) r8 = fcntl$dupfd(r7, 0x2, r7) close(r8) dup(r8) ioctl$FIONREAD(r1, 0xc028698d, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_GETSCREEN(r1, 0xc0245755, &(0x7f0000000000)={0x1, './file0\x00', './file0\x00'}) 1.978266427s ago: executing program 1 (id=130): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x7, 0x4) kqueue() (async) r2 = kqueue() kevent(r2, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x29, 0x20000000, 0x1, 0x13ffb}], 0xde0, 0x0, 0x8, 0x0) sysctl$kern(&(0x7f0000000200)={0x1, 0x49}, 0x2, 0x0, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x13, 0xf0000000, 0xfd, 0x8000010000}], 0x1, 0x0, 0x9b68, 0x0) kevent(r2, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) (async) kevent(r2, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) sendto$inet(r1, &(0x7f0000000280)="757ba3156d5de03f7cc506c676e83833938dd891b83abddf5235490ccde5139353", 0xff98, 0x0, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000280)="757ba3156d5de03f7cc506c676e83833938dd891b83abddf5235490ccde5139353", 0xff98, 0x0, 0x0, 0x0) flock(r1, 0x7) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) sysctl$hw(&(0x7f0000000080)={0x6, 0xc}, 0x2, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000080)={0x6, 0xc}, 0x2, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) execve(0x0, &(0x7f00000001c0)=[&(0x7f00000000c0)='/dev/speaker\x00'], 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) (async) r3 = socket(0x18, 0x1, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = shmget$private(0x0, 0x3000, 0xa0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f00000001c0)={{0x52, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x17c, 0x9dcd, 0x8}, 0xcc3, 0x2e0, 0x0, 0x0, 0x100000000, 0xad4, 0xffff}) (async) shmctl$IPC_SET(r4, 0x1, &(0x7f00000001c0)={{0x52, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x17c, 0x9dcd, 0x8}, 0xcc3, 0x2e0, 0x0, 0x0, 0x100000000, 0xad4, 0xffff}) shmat(r4, &(0x7f000022b000/0x2000)=nil, 0x1000) (async) shmat(r4, &(0x7f000022b000/0x2000)=nil, 0x1000) close(r3) socket(0x18, 0x2, 0x0) 1.974197585s ago: executing program 7 (id=131): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4) listen(r0, 0x4) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbfffffffffb, 0x2000001, 0x2, 0x1, 0xfffffffffffffffa, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xce5], [0xfffffffffffffffe, 0x80000002, 0x6, 0xffffffff, 0x100, 0x7b99, 0x1fe, 0x3, 0x10000000000001], [0x100000001, 0x2, 0x40000000, 0x0, 0x2, 0x11000, 0x1], [0x100, 0x20000000000, 0x401, 0x3, 0xffffffffffeffffe, 0x8], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x2}, {0x0, 0x0, 0xfffffffe, 0x1}, {0x3, 0x7, 0x6, 0x80000001}, {0x0, 0x2, 0x0, 0x808}, {0xb, 0x2003, 0x3, 0x1fffffffffffffff}, {0x0, 0x0, 0x3}, {0x0, 0x962, 0x0, 0x200000000008}], {0x2000, 0x1000001, 0x5}, {0x0, 0x0, 0x73e8, 0x3}}}) r1 = kqueue() kevent(r1, &(0x7f0000000340)=[{{r1}, 0xffffffffffffffff, 0xd2, 0x10, 0x4, 0x5}], 0x7, 0x0, 0x96c0, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r2 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa2f6eaaaaaaaaaaaa08004806003400640003069d9078ffffffffffffffff070b1eac1400aa7f0000000400000009d922057d93dbadc44e36574a8c527570dd49501ef9691cd87f027d352015404e520e04d9b569cdf38b4aa84863753b40857746539d1b5f54158e436738036f323303c8ad0e60ef4b9b7456280363952b5e0e6548234a"]) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000380)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffc, 0x0, 0x0, 0x84, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}}}}}) r4 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r4, 0x801869a3, &(0x7f00000001c0)) kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 1.844573152s ago: executing program 2 (id=133): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = socket(0x18, 0x2, 0x0) getsockname$inet(r0, &(0x7f0000000080), &(0x7f0000000000)=0xc) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x4b, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) 1.839820336s ago: executing program 2 (id=134): r0 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffffc, 0x6b, 0x11, 0x200000000000001, 0x103}], 0x200, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x4, 0x0, 0x100, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x5b}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$WSDISPLAYIO_LDFONT(0xffffffffffffff9c, 0x8058574d, &(0x7f0000000040)={'./file0\x00', 0xd, 0x40000000, 0xfffff47d, 0x0, 0x404, 0x1000, 0x2, 0x0, 0x0, 0x10001, 0x8}) sendsyslog(&(0x7f00000004c0)="d587903f7e679192003da0d0f80d0a5fde", 0xfffffffffffffdb4, 0xa) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0x0, 0x3b, 0x8000000000000009, 0x8000000000000000, 0x8, 0x11}, 0x0, 0x0, 0x0) 1.838395207s ago: executing program 4 (id=135): socket(0x24, 0x2, 0x0) r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000000)=0xffffffef, 0x4) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x130) r1 = socket(0x11, 0x5, 0x4) sendto$unix(r1, &(0x7f0000000980)="b1000504000004000000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b787be1aa0500000051e2f02f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec589040000000000800036281257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343732051eeab71d89e0000405f8ffffff1300"/177, 0xb1, 0x406, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendto$unix(r2, &(0x7f00000001c0)="f1de983f319f7b18434991855b14dc695939e5e36186aecd27e0c614f2d0c4b9501bf9efa479d15a93a888a2c4236940b64e8707c2bff585f9c114693f52d27bed02ac7ba6bcc4c385544e19c978eb2a0656725cb9ce8eac22e77333ee3167bee2705ff7dae459fa2ef8d76f9c7ffbf2c3bfd1ddc2dfc759e3330a263b3e763340d4e5fbf70124d8dad245", 0x8b, 0x6, &(0x7f0000000100)=@abs={0x0, 0x0, 0x0}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x1, 0x0) bind(r3, &(0x7f0000000000), 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0x8}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) 1.800739362s ago: executing program 5 (id=138): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) ftruncate(r0, 0x79c8) r1 = kqueue() kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x200, &(0x7f0000000000)=0xfffffff2, 0x4) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) kevent(r0, &(0x7f0000000040)=[{{r1}, 0xd1a54f832ae3e2ac, 0x74, 0x2, 0x4, 0x60ce}, {{r0}, 0xfffffffffffffff9, 0x8, 0x4, 0xa7a9, 0x80}], 0x5, &(0x7f0000000080)=[{{r2}, 0xfffffffffffffff8, 0x1, 0x1, 0xd, 0x6}], 0xffffff00, &(0x7f0000000100)={0x4, 0x6}) flock(0xffffffffffffffff, 0x6) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)="01", 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) close(r1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x1d}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 1.800429516s ago: executing program 4 (id=139): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x401, 0x1000, 0x3, 0x4, "b21b8cb269412756d0a2cb55e5dfd42426311aae", 0x1, 0x7fff}) r1 = kqueue() kevent(r1, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x29, 0x20000000, 0x1, 0x13ffb}], 0xde0, 0x0, 0x8, 0x0) kevent(r1, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x12, 0xf0000000, 0xfd, 0x2}], 0x1, 0x0, 0x9b68, 0x0) ioctl$FIONREAD(r0, 0x4004667f, 0x0) 1.799963807s ago: executing program 2 (id=140): bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x10, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x408) r1 = syz_open_pts() close(r1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="bd5cfb2aece44f3a46449c7eefa44e345bc3f6d8e639409a71415be91a24303b4cd00f69d1563a936362a1bdb5226e84d546e8371ba2f1e725d3ebf57dd4fc57f0fe26eab7bc6a0a57c9674a0f54c9e8363c3ec2b51418eeee65c2ef5234f256f4e6806146baa66954d96e088d33f1c536bc7d04a62db1", 0x77}, {&(0x7f0000000100)="7c4339135e2d9f89", 0x8}, {&(0x7f0000000140)="415d41513ef3dc435fc0ece3452a91a9a9f7faa4c0f59d960de5674c1212184edeb78867dead6146245c64e5949ec05d3f2e93121af6eaef3848696ff1e5c7e68d9e90d46a1621b4bde5b6baf29c728389f7a436e0d6812692ca920506c5cc536dd7aab89f0f65e15786e63c95c600f3c1b55f66f94154eba549f907363eb74128", 0x81}], 0x3) setitimer(0x1, &(0x7f00000000c0)={{0xa, 0xffffffffffffffff}, {0xffffffff}}, 0x0) ioctl$TIOCNXCL(r1, 0x2000740e) getitimer(0x1, &(0x7f0000000200)) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @random="cc871d004f99", [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x1c, 0x30, 0x67, 0x1, 0x9, 0x4, 0x0, @multicast1, @empty, {[@ra={0x94, 0x6, 0x1}, @timestamp={0x44, 0xc, 0x7, 0x3, 0x3, [{[@rand_addr=0x3], 0xc}]}]}}, @udp={{0x1, 0x2, 0x8}}}}}}) fchdir(r0) 1.778408738s ago: executing program 4 (id=141): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) unveil(0x0, &(0x7f0000000100)='r\x00') ioctl$VNDIOCGET(0xffffffffffffffff, 0xc4104603, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$TIOCMSET(r3, 0x8004746d, &(0x7f0000000040)=0xff) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x9668, "ff14e7130b1e586ca6294000", 0x40, 0x80}) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000100)="013af86f92f381f6aeda2956311d791f646122edc772f84384f9905ba14c3431f959eed39a79aedac5a7adf8d7a82e67595d46b67bf3dce3367f4f62ac96d5e96b788b5fc1e6bdc8eb4bfb81e920fe8ff64ffaf97a9ca43aa6b25084ab45384fb4145bd093265132f76a80feb371a0e2dff36543aaa6873dcbf1ab2eb4cf3e9f5c00", 0x82}], 0x1) ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f00000000c0)={0x73a, 0x9, 0x1, 0x1, "b544e865e5531821a3f6e9238aea6072f7a5d30d", 0x401, 0xd}) syz_open_pts() ioctl$TIOCFLUSH(r4, 0x80047410, &(0x7f0000000780)=0x7) recvmmsg(r2, &(0x7f0000000300)={0x0, 0x1}, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='x\x00') open$dir(&(0x7f0000000440)='.\x00', 0x0, 0xc4) sendmsg$unix(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x4}, 0x406) 1.699253641s ago: executing program 2 (id=142): nanosleep(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db090000100000fed38d5ba80b9e61cd0c535a98230000ff02000000000000000000000000000100"/70]) 1.698719304s ago: executing program 2 (id=143): acct(&(0x7f0000000000)='./file0\x00') (async, rerun: 64) nanosleep(&(0x7f00000001c0)={0x4, 0x6}, 0x0) (async, rerun: 64) execve(0x0, 0x0, 0x0) 1.69843659s ago: executing program 5 (id=144): r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002c40)={&(0x7f0000002c00)={&(0x7f0000000140)=@in={0x2, 0x0}, 0xc, 0x0, 0x0, 0x0}, 0xd2}, 0x10, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000002c0)="ed", 0x1) recvmmsg(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x2042, 0x0) read(r2, &(0x7f0000000000)=""/36, 0x24) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) read(r2, 0x0, 0x0) close(r1) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1, 0xb) r4 = accept$inet6(r3, &(0x7f0000000240), &(0x7f0000000200)=0xc) accept(r4, &(0x7f0000000b00)=@un=@file={0x0, ""/520}, &(0x7f00000001c0)=0x20a) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xffffffffffffffff, 0x30, 0x81, 0x5}], 0x400000, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000280)={&(0x7f0000000180)='./file0\x00', r2, 0x1}) 1.697520821s ago: executing program 7 (id=146): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) r0 = syz_open_pts() close(r0) (async) syz_open_pts() (async) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) (async) kqueue() (async) select(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x56ff}, &(0x7f00000024c0)={0x1fe, 0x7, 0x0, 0x3000002, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) 1.622966859s ago: executing program 7 (id=148): writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000001100)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000002c0)='r\x00') readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/4083, 0xff3) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x300000003}) r0 = socket(0x2, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) sysctl$hw(&(0x7f0000000040)={0x6, 0x8}, 0x2, &(0x7f0000000080)="bd0f19aeec490c682227f7898d1a068d156e5cd5c3", &(0x7f0000000000)=0x15, 0x0, 0x0) 1.530259086s ago: executing program 1 (id=152): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x7010, 0xffffffffffffffff, 0x5) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCSBRK(r0, 0x2000747b) read(r0, &(0x7f0000000100)=""/243, 0xf3) 1.408835549s ago: executing program 7 (id=156): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0/file0\x00') r0 = socket(0x18, 0x4, 0x60) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x1) (async) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x1) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x2, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000080), &(0x7f0000000000)=0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x154) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x0}, 0x8) select(0x40, &(0x7f0000000140)={0x5, 0x0, 0x2, 0x1, 0x0, 0x7, 0x204, 0xff7ffffffffffff8}, 0x0, 0x0, 0x0) r1 = socket(0x800000018, 0x2, 0x0) getsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff8c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x4000)=nil, 0x100000000000000, 0x4) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x100000000000000, 0x4) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x8}, 0x5c, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000180)='./file0\x00', 0x9f) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x9f) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0xffffffff}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x7, 0xd}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0xffffffff}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x7, 0xd}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) 1.407823842s ago: executing program 1 (id=157): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async, rerun: 32) r0 = syz_open_pts() (rerun: 32) close(r0) (async, rerun: 64) r1 = syz_open_pts() (rerun: 64) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x186) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$TIOCNXCL(r0, 0x2000740e) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x10000) (async) mlock(&(0x7f0000ffa000/0x5000)=nil, 0x5000) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0x800, 0xf, "0000efc72f0000000000000000070000001e8a00", 0x4, 0x3effc}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async, rerun: 32) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x2, 0x4000008, 0xa, 0xfffff7fe, "a648af4836d38f2858778b75054ac0449bfb1e99", 0x3, 0x800004}) (async, rerun: 32) mknodat(r2, 0x0, 0x6000, 0x2) (async) readv(r0, &(0x7f0000000180)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x2, &(0x7f0000000080)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa9", &(0x7f0000000100)=0x30, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x3, &(0x7f0000000080)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4ed2ce08ee7f16195ac49fb6ee8486b47aae9157492458d108d0fcface1392fdf88be327280a9ccb04d81e8c6efb7ee", &(0x7f0000000100)=0x70, 0x0, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x8573}, {0x5, 0x0, 0x0, 0x31}]}) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCSTAT(r1, 0x20007465, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4096, 0x1000}], 0x2) 1.407311987s ago: executing program 4 (id=158): setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080}) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x2, 0x0, 0xa, 0x100000001}) fcntl$lock(r1, 0x8, &(0x7f00000001c0)={0x3, 0x0, 0x9, 0x300000003}) r2 = syz_open_pts() r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000400)={0x4, 0x3ff, 0xf84, 0x4, "ef9931588a76bf80575c74c65f04744a34497ed8", 0x6af1}) poll(&(0x7f0000000440)=[{r3, 0x125}], 0x1, 0x1) syz_open_pts() r4 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x807, 0x3, 0xffff, 0x200495, "084880fa870000bd090088d11554e90d6602ff07", 0xb52, 0x2a6d}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80000, 0x0, 0x0, 0x0, 0x0, 0x1c0, 0x8fa}, 0x6, 0x400, 0x0, 0x0, 0x4, 0x10, 0x6, 0x8000008000000e5f}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f00000019c0)='\a0', 0x2}], 0x1) read(r4, &(0x7f00000009c0)=""/4096, 0x1000) 1.167937579s ago: executing program 5 (id=159): sysctl$kern(&(0x7f0000000140)={0x1, 0x30}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7bf, &(0x7f0000000140)=ANY=[@ANYBLOB="b905f0ffffff0000000000000800450007"]) 1.15985792s ago: executing program 0 (id=160): setitimer(0x1, &(0x7f0000000000)={{0xffffffff, 0x4}, {0x80000001, 0xffffffffffffffff}}, 0x0) setitimer(0x1, &(0x7f0000000000)={{0xffffffff, 0x4}, {0x80000001, 0xffffffffffffffff}}, 0x0) (async) 1.154909146s ago: executing program 5 (id=161): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) fsync(r0) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x1, 0x887e) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000040)=0x6) r1 = open(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ftruncate(r1, 0x8000000000852e) execve(0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) (async) fsync(r0) (async) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x1, 0x887e) (async) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000040)=0x6) (async) open(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) (async) ftruncate(r1, 0x8000000000852e) (async) execve(0x0, 0x0, 0x0) (async) 1.154589593s ago: executing program 6 (id=162): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(r1, 0x6, 0x8, &(0x7f0000001300)="6d2322a0", 0x4) connect$unix(r1, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000140)="24bdfa5d1d2873c63e353482d05ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688a858b8cf6bbca32ec975d185cfcadf68ed7796e53e0000400007a20746f313da7dc6c5133407dbcafaea3077475df6575658bc77274869b4cf11d1374cacc8af0e6508712b97dd66229e96593f6a8822b437639678a1cc3702368dc70dcf2429a7e1582005bed8a072a9c3310cdeeb79f221bda2b2ccef950b12ea84e60e401ed6abbac6c034a7d182a13e31f491b6f624148710ee7f3278e676ec4119399aa9c8774e6c53f708853588d97fc458e5807859417c4cc81f0f51d2f4718ce77baaadf64199ef12945bb150600"/256, 0x198b3) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x24, 0x2, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000080)={0x7, 0xf}, 0x2, &(0x7f00000000c0)="16a69ab1", &(0x7f0000000040)=0x4, 0x0, 0x0) r3 = syz_open_pts() openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x20, 0x0) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000000)=0x8000) r4 = dup2(r3, r3) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000010c0)={0x3, 0x8, 0x8d, 0x0, "8a7dfa2c66a1da2cb517a2b6b8599f4e031cb9ba", 0x7, 0x8}) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x0, 0x7, 0x200, 0xc9f9, "4d6c25186c6dd0dd414d0c9c8fb372d46de4b4d4", 0x10000, 0xb}) syz_emit_ethernet(0x2a, &(0x7f0000001340)=ANY=[@ANYBLOB="ffffffffffff4521001c00650fff00f09038ac1400aa7f0000017c0000000500"/42]) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, &(0x7f0000000040)={0x2e89, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) mkdir(&(0x7f0000000480)='./file2\x00', 0x0) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000380)="9a43bf050ed458629d4eaad90c36aac83a0937707f181cbd7cba3b1bd87ad01803222165805d7c5be735cecc075837a12fd43281dd36b1d090f839e7b5d089f71997dfb1e8f7704951ffd1a22a9a3f99a3abff8ff5c3e1b00e1414bff02bf0570b02317003d73063bd8cc272e34ef1f70703bc4189a381e1c17329afeae2fa5197ffa812ec25d66a3ed12a18c6af9c71b4fcb2346e7611b3252fffb7562acb3049b23837606db8b7b7a6b8c44a4ff2b1a007f4722c9669b8a413ed4bf35ece48df33ef54060dfa7d048978b02c55ae3243541486e55b3bf5e009a3b1ecd04128acf92f7050da062c82766af4c500"/248, 0xf8) mkdir(&(0x7f0000000040)='./file2\x00', 0x1c1) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0x2be00000000000, 0x1, 0x2, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x2eff, 0x2, 0x3, 0xfffffffffffffffc, 0x1, 0x8000000, 0xad, 0x2000000000002, 0xce7], [0xfffffffffffffffe, 0x1, 0xfffffffffffffffb, 0x8000ffffffff, 0xf9, 0x7b95, 0x201, 0x2000c, 0x6], [0x2, 0xfffffffffffffffb, 0x40000000, 0x4, 0xffffffffffffffff, 0x10fff, 0xfff7fffffffffffe], [0x4, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x4], [{0x8, 0x5, 0x0, 0x5}, {0xfffc, 0x7, 0x5, 0x2}, {0x10, 0x101, 0x1, 0x814}, {0x3, 0x5, 0xa, 0x7}, {0x10, 0x2, 0x0, 0x80a}, {0x400b, 0x2003, 0x40000, 0x4}, {0x1, 0x20000, 0x4, 0xfa}, {0x0, 0x965, 0x3, 0x8}], {0x2400, 0x8, 0x10000}, {0x0, 0xfffffffc, 0x3, 0x5}}}) kqueue() accept$inet(0xffffffffffffff9c, &(0x7f0000000640), &(0x7f0000000680)=0xc) 1.010634326s ago: executing program 0 (id=163): syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @empty, {[@lsrr={0x83, 0x3}]}}, @icmp=@info_request={0xf, 0x0, 0x0, 0x42ec, 0xfff}}}}}) socketpair(0x24, 0x1, 0x69, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0x14}, 0x2, 0x0, 0x0, 0x0, 0x0) 1.010162958s ago: executing program 3 (id=164): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x5, 0x2}, {0x3, 0x0, 0x0, 0x4}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000380)=0xffffffffffffff24) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e6993192cc923feeda3c8b7400d1e057e571001e422c76976c155915", 0x2a) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000080)="0315f1d89ec5a317a9357682", 0xc) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, &(0x7f00000000c0)="6bbc4044635cdfa0130442359ce30f1d6397d3e99e3a21cac54252de3f31068e94599964f0992fc4f57a21f3e43840110c5aedadf534eb754e43cfefbf30d1873b41d1b6db5ac9b567031f5f94e299e42815a09a0b895be4e6fbe32bbcc6eb773fd30096f35767d120948e67b7183f75f955cebe0ab31be9a3471867737ede7592cb85a0a3fa080000009b265adc3f46c7a4790853cbcce224abc7b30926aef1d2c9497b96374901fd3f0fa136327cedf27ab77a7bd690a931e870d6576296ea83f54541af73092ebe7575a3899854202d3ae7ed09d9cb3895d29f8722ad1fc4315f2c7a83cfba586bf6cf2b232222ba0315879fcc0c5c729cbafa39551ad6d7bf1fe58fefee90cd34bebbc4ba6faf759e1647ee8384574e91bb29d971700c1f0f2b3a27263a73328833bd4bc5577fd4521ff3ce1257081533ede709c175acf59272ef759399e20f7f3ebedcdb6485ae8b72228ef2a8172601ce45147783ee8e31631baab0f9836486f8e0acb23c55df91", 0x171) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x5, 0x2}, {0x3, 0x0, 0x0, 0x4}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async) socket(0x18, 0x2, 0x0) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000380)=0xffffffffffffff24) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e6993192cc923feeda3c8b7400d1e057e571001e422c76976c155915", 0x2a) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000080)="0315f1d89ec5a317a9357682", 0xc) (async) connect$unix(r2, &(0x7f0000000000), 0x10) (async) write(r2, &(0x7f00000000c0)="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", 0x171) (async) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) (async) 1.009911177s ago: executing program 1 (id=165): r0 = getuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, r0, 0x0, 0x0, 0x7}, 0x4, 0x4006, 0x0, 0x0, 0x2000000000003, 0x3fd, 0x8, 0xc000004}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa01000000000086dd6940158200080005000000000000000000000000000000000000000000000000000000000080"]) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) getuid() (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, r0, 0x0, 0x0, 0x7}, 0x4, 0x4006, 0x0, 0x0, 0x2000000000003, 0x3fd, 0x8, 0xc000004}) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa01000000000086dd6940158200080005000000000000000000000000000000000000000000000000000000000080"]) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) 1.007428064s ago: executing program 3 (id=166): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f0000000140)) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400"], 0x18}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x6, 0x3, 0x0) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000200)="fd0cc085", 0x4) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}, 0x0) setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000180)=0x7fff, 0x4) recvfrom$inet6(r2, &(0x7f0000000480)=""/200, 0xc8, 0xfe82727909754346, 0x0, 0x0) write(r0, &(0x7f0000000580)="52e2715f1ae40d42d1e34124e1c05f95e91b03b9806e038c164ef38652519107fc7b66810b0b6534729b9b9f6951dffc7a13bc91cc66932f4a76a9199538545d9b1896f1426becf756cc9357c9d58b891358968bbe9f9189bb2710dfc0355be53af922fc41c3833e6694c2e397aa55a0123de0ddc15d50c310c8a85659ec5417ec20fb40ca5c38e1751cf27844a72a83ccdefd2d77c4dd88774095c75ff87513b7b4b6db2e307377d08eeacf0a1a214719ce451d890d95c341dd57dfd085f79b92941d8afe43b2", 0xc7) r3 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) getsockname(r3, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3a}, 0x2, &(0x7f0000000680)="5d603f9e4bd57b546e7658f3a97a3645c9d3d6609f0b58f14ecf2f9ec11f888399d9ba0fa2126be0298f678ff5288bde918f000000000000000000", 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x4e, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000000080)={0x0}, 0x6a, 0x0) shmdt(0x0) close(r4) unveil(0x0, &(0x7f00000000c0)='r\x00') 1.006009591s ago: executing program 0 (id=167): syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/340]) 976.142331ms ago: executing program 6 (id=168): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xf02, 0x196) r1 = kqueue() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x9, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x6}, 0x6, 0x200000000, 0x0, 0x0, 0x4, 0x10, 0x794f, 0xc36c}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket(0x11, 0x3, 0x0) mmap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x4, 0x9010, 0xffffffffffffffff, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba222b54f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x6, 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x4000ac, 0x0, 0x7, {[0x5, 0x802, 0xffffffffffffffd, 0x1, 0xc, 0x0, 0x0, 0x0, 0x9, 0x481, 0x2, 0x401, 0x80000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x8], [0x63, 0x9, 0x2ff, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x7, 0xfffffffffffffff8], [0x7fffffffffffffff, 0x8, 0x0, 0x0, 0x9], [0xdb9d, 0x0, 0x4, 0x165, 0x0, 0x9], [{0x0, 0x10, 0x0, 0x8000000000003}, {0x5, 0x0, 0x6, 0x4}, {0x1000, 0xa, 0x1, 0x1}, {0x0, 0x1000, 0xfffd, 0x1}, {0x0, 0x0, 0xc8, 0x7fffffffffffffff}, {0x9, 0x5, 0x2, 0x1}, {0x0, 0x0, 0xaa, 0xfffffffffffffff9}, {0x800, 0xfffffff5, 0xc00000}], {0xffe9, 0xfffffffd, 0x7fff, 0xf5a752c}, {0x0, 0x6, 0x10000000, 0x2}}}) r3 = kqueue() kevent(r1, &(0x7f00000003c0)=[{{r3}, 0xffffffffffffffff, 0x1, 0x20, 0x4, 0x8}, {{r0}, 0xfffffffffffffff8, 0x4, 0x2, 0x7, 0x6}], 0x5, 0x0, 0x8, 0x0) kevent(r3, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) setsockopt(r2, 0x9, 0x55ad, &(0x7f0000000400)="93b2d0941b86fddafaa2d3afeabf34858f1e6edfd3322f3150d6e59a696d2edae9875dab7ad6b53d85820fbf4b511fc074dcb7f5f1ead6add7c454ad079656cdd9ae93a2b8709a20a6ed48727f863729acac3e192fae498a705ab3a3076d8758f165ded97f97547c14c17b2d3bfcbbbf21ad3fdc63f990d938c477d4b94b502d30059cce26da17e36cb402c2ab45ed622131ebeb84f284b0b55a199242bfd962e126dea6c63f0ba833e1e645c8daf6c7fdb3cb8f20a859591a983da5e279a584ed63ad2607019cab20868f504460aafbc46f5d234475ae5c5409f47af8e3ddfbd3cdb324ea11bda3d5ec", 0xea) truncate(&(0x7f0000000000)='./file0\x00', 0x2fffe) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0) 973.172129ms ago: executing program 1 (id=169): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x56}) msync(&(0x7f0000385000/0x4000)=nil, 0x4000, 0x7) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000000c0)={0x40978b, 0x10101, 0x7, 0x506, "3b082001f78b67af9e9004000000230100040200", 0x202, 0xf}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r1 = socket(0x18, 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x4, 0x10, [{0x1000, 0x3, 0x775, 0x80000201}, {0x2, 0x6, 0xfffffffe, 0xfff}, {0x7, 0xfffffffe, 0x2006}, {0x2, 0x7, 0xf}, {0x0, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x24, 0x1, 0x85, 0x5}, {0x0, 0x40009, 0xdffffff8, 0xfbffe2ea}, {0x8, 0xffa, 0x4000006, 0x7fff}, {0x0, 0xfffdfff8, 0x400005, 0x8bfb}, {0xfffff0ce, 0x8000000, 0x5, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x106, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x3, 0x5}, {0x9be2, 0x108001, 0x6, 0x69}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x1, 0x5, 0x8cba, 0x6, "909c92107e9479099d3b7d7f164aeb006335a34e", 0x2, 0x6}) poll(&(0x7f0000000000), 0x35, 0x0) close(0xffffffffffffffff) r3 = socket$inet6(0x18, 0x2, 0x0) ioctl$VMM_IOC_READREGS(r3, 0xc050756a, &(0x7f0000000340)) setrlimit(0x6, &(0x7f0000000000)={0xc145, 0x8}) syz_open_pts() setsockopt(r1, 0x6, 0x9, &(0x7f0000000000), 0x0) setsockopt(r1, 0x1000000029, 0xb, &(0x7f0000000080), 0x0) mlockall(0x1) 972.606995ms ago: executing program 5 (id=170): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x80, 0x4, 0xfbfffffe, 0xfffffffe, "dd6c1f460000ff20004092d6126e4ed671e500", 0x800}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0x0, 0x1}}) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x0, 0x0, 0x0}, 0x8) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) socket$inet(0x2, 0x3, 0x0) socket$inet(0x2, 0x1, 0x6) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x9, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x6}, 0x6, 0x200000000, 0x0, 0x0, 0x4, 0x10, 0x794f, 0xc36c}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba222b54f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x6, 0x0, 0x0) unveil(&(0x7f0000000340)='./file2/file0\x00', &(0x7f00000004c0)='c\x00') unveil(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='r\x00') connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mkdir(&(0x7f0000000200)='./file2/file1\x00', 0x186) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000516000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0xa, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000380)) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, 0x0}) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xa256, &(0x7f00000003c0)="0000000092000000000000000768989a681dd9e32db155e68693952f0fcd0f231107373f44fb4bd90a8df2149480365af3cde523e2c61a532ec90df28b6aecab3318c205fb34511566e01ff7d59aebe6e6bc73e94f1f608a2c0ca010f729ba215de49e70b503f446658f10656b6b4c3f72fb5d8f4b9565a2d3b6ad7ac9311d2c190fb7f847e4391642f5fae3302c6405bc7f9e7fc083719da24cca4b4e06ed7ecb24555a6a81faa0c78a5a048b8870310c86244c8345e137d640e35c3754f65ce775b0640d0102bd6b3aaa5a882e45eb2664b12eff74b5eaa712a5eaa3cab842a8a72d7b8949ec000000", 0xea) setsockopt(r4, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) fsync(r3) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000140)='./file2/file1\x00', 0x5, &(0x7f0000000180)='./file2/file0\x00', 0xe}) 972.440571ms ago: executing program 0 (id=171): syz_extract_tcp_res(&(0x7f0000000000), 0x20000000, 0x101) 972.150232ms ago: executing program 3 (id=172): setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000140)=""/237, &(0x7f0000000040)=0xed) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000440)="14bdfa5d1d34e2fecb0020433b07b7f0e3aec430d2cb3799339a346f737850550700000095b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8b09d542c2148aa42be940970fe88d34d8f99afe7e782023740000000000800000010000000000000000000036d698af38942d3f2320e7d4fb9d111b702be8dc7bac90f17e563cbd0609c598f0148be2ca25d8b2e87f9791f8bf441559b253953f163b37d58fcee4", 0xffdf) 286.430251ms ago: executing program 6 (id=173): r0 = socket(0x18, 0x2, 0x0) close(r0) socket(0x11, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x3}, 0x8) r1 = socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 284.517669ms ago: executing program 6 (id=174): r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0xc5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0xa010, r0, 0x0) 284.117184ms ago: executing program 3 (id=175): fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc, 0x1000300000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0x8}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f00007ae000/0x1000)=nil, 0x4bb6}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000212000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000501000/0x1000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f0000027000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000345000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00001d1000/0x3000)=nil, 0x9bc4}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x18, 0x1, 0xff, 0x1ff}, 0xc) r2 = socket(0x18, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000000)=0xffffc5db, 0x4) getsockname(r2, 0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x10) symlink(&(0x7f00000001c0)='.\x02/file1/file0\x00', &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000dc0)='./file0\x00', r1, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000180)='./file0\x00', 0x75f493fec6515f78, 0x0) rename(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000fc0)='./file0\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f00001ff000/0x1000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x20400000}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f0000387000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x20006}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f0000131000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x10000}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x14}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000001}, {&(0x7f0000795000/0x9000)=nil, 0x0, 0x9bbf}, {&(0x7f00007ad000/0x2000)=nil, &(0x7f0000142000/0x4000)=nil, 0x101}, {&(0x7f0000573000/0x2000)=nil, &(0x7f000015c000/0x2000)=nil}], './file0\x00'}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000140)={{0xe, 0x4}, {0xfeffffffffffffe0, 0x10005}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x1, 0x6, 0x8cbe, 0x9, "906af4ffffcd2092107e9479749d3b6d7f164aeb", 0x8, 0x7f}) 283.620823ms ago: executing program 0 (id=176): getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semop(0x0, &(0x7f00000001c0)=[{0x3, 0x1, 0x1000}, {0x3, 0xffff}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0x1000007f, &(0x7f0000000000)="ebff33ea02ccfd812eaa4e713043a7e5b5734c3c", 0x14) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r3}}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, r3, r1, 0x0, 0x86, 0xf}, 0x8008, 0x40000010000, r0, 0x0, 0x200000001, 0x7fffffffffffffff, 0x4, 0xfffffffffffffffd}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) 283.365929ms ago: executing program 3 (id=177): clock_getres(0x2, &(0x7f0000000000)) sysctl$kern(&(0x7f0000000040)={0x1, 0x20}, 0x2, &(0x7f00000000c0)="7e7707640ed2fe7be230de26ef61ee05aa105427345e4414f01d94beeb306882ae91a0c3699b45e5119336cd899c7b5ec2ed50020714cd63071d75a7ff68ea22491fc28c537a353fcd17dfdf7b000d6df78a8974f61b3a859de66f976cfee824f0dd542c62cd71a938932c23390d1fd8a0cffdc3f3541a5e654d5f42661416047c0f3ca0bf", &(0x7f0000000180)=0x85, &(0x7f00000001c0)="e682e4942052", 0x6) sysctl$net_inet_udp(&(0x7f0000000080)={0x4, 0x1f, 0x11, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) 275.983248ms ago: executing program 4 (id=178): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea10070000000000", 0x8) (async) sendto(r0, &(0x7f00000000c0)="415a46ca84cca2e8fe522d7d46c6a99eb5f3ca34f150954199c23e762a3538f97defd4db5a69bfdc0c9c2382b7b9a9de4ca7cfe2944e37e1e6ad94c2b7e9ab0dabbad72c5b4b8612f97b5222cecaf3c7264318370779aa61084ce7189dbd2c5026bc96d5ac9747a17b376e0fa1826521029f27b660316f3cb6563973a98cd8c34b7adec744439207c552fe137a69a61f90d1e0682eb7554bf2ba88f7acfed32481a9d39f8c25984cbddd9f00fffbabff15f4f7763148e8998fededc4216457bd1faa45e6", 0xc4, 0xc, &(0x7f0000000000)=@in6={0x18, 0x2, 0x10000000, 0x7fff}, 0xc) (async, rerun: 32) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (rerun: 32) 274.427789ms ago: executing program 6 (id=179): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x5, &(0x7f0000000140)="e33745e84d5ebfb9cc2f7fa3a7f7891721720e69dac610a4fb5eaf3e3c6e1d648a8ca6ebc70f949c442aee9dc79e2cd74f4e106f382caf01ada3bc4efb0f6bc50690e5d879fac2492f4a0491b1ea3359aa5c5164ad97ac7c3aaddd498c0f962f5167b69cfdc8287fc34b8138340e60c404a855858ea5fc", &(0x7f0000000000)=0x59, 0x0, 0xfffffdfd) 273.328988ms ago: executing program 7 (id=180): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000)=@file={0x1}, 0x2) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x810, r1, 0x0) r2 = syz_open_pts() close(r2) syz_open_pts() writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="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", 0x19b}], 0x1) 270.793618ms ago: executing program 2 (id=181): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysctl$net_inet_ip(&(0x7f00000001c0)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = kqueue() kevent(r1, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0xa7, 0x80000000, 0xfffffffffffffffd, 0x13fff}], 0x4, 0x0, 0x8, 0x0) kevent(r1, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x18, 0xf27ff7793bbc9c2c, 0x5, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) kevent(r1, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) 39.150481ms ago: executing program 4 (id=182): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$KDGETLED(r0, 0x40044b41, &(0x7f0000000240)) (async) recvmmsg(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff02, 0x802, &(0x7f0000000000)={0xfffffffffffffffb, 0x5}) r1 = socket(0x18, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x40) (async, rerun: 64) r2 = getppid() (rerun: 64) r3 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) ftruncate(r3, 0x10000) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r5, 0x0) (async) r6 = kqueue() kevent(r6, &(0x7f0000000000), 0x3ff, 0x0, 0x8000801, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101) (async) fcntl$setown(r1, 0x6, r2) (async, rerun: 32) shutdown(r1, 0x2) (async, rerun: 32) sysctl$kern(&(0x7f0000000040)={0x1, 0x5}, 0x2, &(0x7f0000000080)="98123e", &(0x7f00000000c0)=0x3, &(0x7f0000000280)="4212c33db9a512b068a592eac31623d8407a3fc1d06121285b4b8cbc1d2cce532361791d0d65071624d2e1c706ec1ee686bd95de90c16da22b15e1c35c3045f012f354852917fada647a31e58614ae7058c70c9a66fe2fbc45feaede0cc1ac0b83d98ceb71df84c911449d10cef3d947e17b", 0x72) (async) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000100)="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", 0x9d}], 0x1000000000000370) syz_emit_ethernet(0xf0, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 38.875088ms ago: executing program 3 (id=183): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x80}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="847b62e2e20a84c89393834af0fa176af136f1733716977b6c187c3f8f9fb40f461c29991227f9f59fbc289c9e3f6e0d22a020802cb677bd349cdab6ebb0815abb78705ac553ba32a10988605dad8a7d88c2f0cdd7b9c635b9ce3fcab9899993258133ad0a", 0x65}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)='\a', 0x1}], 0x1) syz_open_pts() ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) r1 = syz_open_pts() fcntl$lock(r1, 0x7, 0x0) shmat(0x0, &(0x7f0000009000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000140)={0x3, 0x3aa, 0x1ff, 0x800, "f73fc8fe800f511862565f036521b532a0688b44", 0x7ff, 0x8}) 793.633µs ago: executing program 7 (id=184): semget(0x3, 0x4, 0x220) (async) r0 = semget(0x3, 0x4, 0x220) semctl$GETNCNT(r0, 0x2, 0x3, 0x0) (async) semctl$GETNCNT(r0, 0x2, 0x3, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) semctl$GETPID(r0, 0x2, 0x4, &(0x7f0000000240)=""/203) (async) semctl$GETPID(r0, 0x2, 0x4, &(0x7f0000000240)=""/203) semctl$SETVAL(r0, 0x2, 0x8, 0x0) (async) semctl$SETVAL(r0, 0x2, 0x8, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd, 0x20001fffffffd}) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000100)={0x94, 0x6, {0x4, 0xe00000000000}}) setsockopt$sock_int(r1, 0xffff, 0x80, &(0x7f00000000c0), 0x4) r3 = fcntl$getown(r2, 0x5) semget$private(0x0, 0x5, 0xac) (async) r4 = semget$private(0x0, 0x5, 0xac) getegid() (async) r5 = getegid() semctl$GETNCNT(0x0, 0x0, 0x3, &(0x7f0000000180)) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0x0, 0x0, r5, 0x104, 0x101}, 0x1, 0x2, 0x6}) setsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000140)={r3, 0x0, r5}, 0xc) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) truncate(0x0, 0x0) (async) truncate(0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x1000) fcntl$setstatus(r1, 0x4, 0x80) sysctl$net_inet6_ip6(&(0x7f0000000480)={0x4, 0x18, 0x29, 0x2b}, 0x4, &(0x7f00000004c0)="8e6fc610", &(0x7f0000000580)=0x4, 0x0, 0x0) 444.495µs ago: executing program 0 (id=185): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) sysctl$net_inet_carp(&(0x7f0000001140)={0x4, 0x2, 0x70, 0x1}, 0x4, &(0x7f0000001180)="ee7882c5", &(0x7f0000001200)=0x4, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x5a) mkdir(&(0x7f0000000280)='./file0\x00', 0x5) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r2 = socket(0x18, 0x2, 0x0) r3 = socket(0x2, 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x4d523ac07cc2cfe4) r4 = getpgrp() fcntl$setown(r3, 0x6, r4) connect$unix(r3, &(0x7f0000000000), 0x10) ioctl$FIONREAD(r2, 0xc1206949, &(0x7f0000000040)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) socket(0x1, 0x2, 0x0) (async) sysctl$net_inet_carp(&(0x7f0000001140)={0x4, 0x2, 0x70, 0x1}, 0x4, &(0x7f0000001180)="ee7882c5", &(0x7f0000001200)=0x4, 0x0, 0x0) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x5a) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x5) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) socket(0x18, 0x2, 0x0) (async) socket(0x2, 0x2, 0x0) (async) fcntl$setstatus(r3, 0x4, 0x4d523ac07cc2cfe4) (async) getpgrp() (async) fcntl$setown(r3, 0x6, r4) (async) connect$unix(r3, &(0x7f0000000000), 0x10) (async) ioctl$FIONREAD(r2, 0xc1206949, &(0x7f0000000040)) (async) 236.046µs ago: executing program 5 (id=186): rename(0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x3ea) setsockopt(0xffffffffffffffff, 0x1000000029, 0x36, 0x0, 0x0) sysctl$net_inet_esp(&(0x7f0000000240)={0x4, 0x1e, 0x2, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x11) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000480), 0x0) renameat(r0, &(0x7f00000025c0)='./file0\x00', r0, &(0x7f0000002600)='./file1\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x118a, 0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') 0s ago: executing program 6 (id=187): r0 = syz_open_pts() r1 = socket(0x2, 0x5, 0xff) close(r1) semop(0x0, &(0x7f00000000c0)=[{0x2}, {0x0, 0x2ff, 0x800}], 0x2) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sysctl$vm(&(0x7f0000000080)={0x2, 0xc}, 0x2, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000500)="24bdfa5d1d2873c63e35348295b299ab09dbd0734449c365d05ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688a858b8cf6bbca32ec977d185cfcadf68ed7796c5133407dbcafaea3077475df6575658bc77274869b4cf11d1374cacc8af0e650876593f6a8822b437639678a1cc3702368dc70dcf2429a7e1582005bed8a072a9c3310cdeeb79f221bda2b2cce0d51b12ea84e60e401ed6abbac6c034a7d182a13e31f491b6f62414871072dd6142364d7a24c96ccb89e1a8eefb0048dc5a3e9053311f251068550d9ba9d8d06c72d7f65e9eb40bdec7a318cb21c7c111d699ae2", 0xea) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. pmap_unwire: wiring for pmap 0xfffffd806cb04c00 va 0xd9cbac38000 didn't change! panic: kernel diagnostic assertion "pg->wire_count != 0" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_page.c", line 1250 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 384109 95277 32767 0x10 0 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff833b6bee) at panic+0x1e5 __assert(ffffffff833f2b6a,ffffffff83347316,4e2,ffffffff8334734b) at __assert+0x29 uvm_pageunwire(fffffd8008b6b590) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffffd800f3697c8,d9cbac38000,d9cbac39000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffffd800f3697c8,fffffd806ad8b650,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffffd800f3697c8) at uvm_map_teardown+0x117 exit1(ffff80003c4402c0,0,0,1) at exit1+0x6fc sys_exit(ffff80003c4402c0,ffff80003c415140,ffff80003c415090) at sys_exit+0x1a syscall(ffff80003c415140) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76bb76a9a1c0, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "pg->wire_count != 0" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_page.c", line 1250 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833b6bee) at panic+0x1e5 __assert(ffffffff833f2b6a,ffffffff83347316,4e2,ffffffff8334734b) at __assert+0x29 uvm_pageunwire(fffffd8008b6b590) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffffd800f3697c8,d9cbac38000,d9cbac39000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffffd800f3697c8,fffffd806ad8b650,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffffd800f3697c8) at uvm_map_teardown+0x117 exit1(ffff80003c4402c0,0,0,1) at exit1+0x6fc sys_exit(ffff80003c4402c0,ffff80003c415140,ffff80003c415090) at sys_exit+0x1a syscall(ffff80003c415140) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76bb76a9a1c0, count: -11 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c414d60 rbx 0xffff8000299dee07 rdx 0 rcx 0xffff80003c4402c0 rax 0xffff8000299ddff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xfd21a654781da781 r11 0x605dcadbb7272661 r12 0xffff8000299dec08 r13 0 r14 0 r15 0x1 rip 0xffffffff82b82725 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c414d50 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=134725 pid=35321 tcnt=0 stat=onproc flags process=1018 proc=2000 runpri=32, usrpri=74, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c4402c0 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff8000fffe7778,0xffff80003c441a28 process=0xffff80003c40c020 user=0xffff80003c410000, vmspace=0xfffffd800f3697c8 estcpu=24, cpticks=14, pctcpu=0.4, user=0, sys=7, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 95277 384109 92565 32767 7 0x10 syz-executor 95277 382992 92565 32767 2 0x4000010 syz-executor 95277 150028 92565 32767 2 0x4000010 syz-executor 41823 231281 76880 32767 2 0x10 syz-executor 41823 66961 76880 32767 2 0x4000010 syz-executor 56527 367279 44968 32767 2 0x10 syz-executor 56527 165005 44968 32767 3 0x4000090 fsleep syz-executor 56527 350959 44968 32767 3 0x4000090 fsleep syz-executor 57068 479314 15206 32767 2 0x10 syz-executor 57068 388203 15206 32767 3 0x4000090 fsleep syz-executor 57068 263339 15206 32767 2 0x4000010 syz-executor 62146 137254 49430 32767 3 0x3010 suspend syz-executor 62146 431659 49430 32767 2 0x4081010 syz-executor 62146 13584 49430 32767 3 0x4081010 inode syz-executor 62146 479366 49430 32767 2 0x4081010 syz-executor 5514 197907 16359 32767 2 0x10 syz-executor 5514 266524 16359 32767 3 0x4000090 kqread syz-executor 44968 397037 78419 32767 2 0xc90 syz-executor 76880 324080 7097 32767 2 0xc90 syz-executor 92565 502784 37624 32767 2 0xc90 syz-executor 49430 47745 70794 32767 2 0xc90 syz-executor 16359 46204 80467 32767 2 0xc90 syz-executor 15206 114580 94819 32767 2 0xc90 syz-executor 31851 479180 17855 32767 2 0xc90 syz-executor 78419 129225 62023 0 3 0x82 wait syz-executor 37624 173812 62023 0 3 0x82 wait syz-executor 12781 520233 62023 0 3 0x82 wait syz-executor 70794 326013 62023 0 3 0x82 wait syz-executor 94819 274707 62023 0 3 0x82 wait syz-executor 80467 186945 62023 0 3 0x82 wait syz-executor 17855 513494 62023 0 3 0x82 wait syz-executor 7097 246791 62023 0 3 0x82 wait syz-executor 62023 281438 45550 0 3 0x82 kqread syz-executor 45550 56471 41637 0 3 0x10008a sigsusp ksh 41637 255379 65690 0 3 0x98 kqread sshd-session 65690 164722 95824 0 3 0x92 kqread sshd-session 40511 126232 1 0 3 0x100083 ttyin getty 95824 156394 1 0 3 0x88 kqread sshd 3501 337649 52613 73 3 0x1100090 kqread syslogd 52613 402349 1 0 3 0x100082 sbwait syslogd 69288 381388 1 0 3 0x100080 kqread resolvd 78034 298148 37117 77 3 0x100092 kqread dhcpleased 59246 281954 37117 77 3 0x100092 kqread dhcpleased 37117 494161 1 0 3 0x80 kqread dhcpleased 87051 102977 0 0 2 0x14200 smr 6474 235948 0 0 2 0x14200 zerothread 84622 493038 0 0 3 0x14200 aiodoned aiodoned 36028 259872 0 0 3 0x14200 syncer update 45953 432742 0 0 3 0x14200 cleaner cleaner 96398 342683 0 0 3 0x14200 reaper reaper 46444 201285 0 0 3 0x14200 pgdaemon pagedaemon 62506 456035 0 0 3 0x14200 bored viomb 4926 319855 0 0 3 0x40014200 acpi0 acpi0 85985 292375 0 0 3 0x40014200 idle1 35448 438050 0 0 3 0x14200 bored softnet1 42218 442843 0 0 2 0x14200 softnet0 42349 343619 0 0 3 0x14200 bored systqmp 49520 248714 0 0 3 0x14200 bored systq 42256 479680 0 0 3 0x14200 tmoslp softclockmp 99031 15473 0 0 3 0x40014200 tmoslp softclock 52539 144527 0 0 3 0x40014200 idle0 1 158629 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 62146 (syz-executor) thread 0xffff8000fffe74e0 (431659) exclusive rrwlock inode r = 0 (0xfffffd806c918578) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 62146 (syz-executor) thread 0xffff8000fffe6d18 (13584) exclusive rrwlock inode r = 0 (0xfffffd806ec72ef8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 vn_open+0x1f1 #8 doopenat+0x35b #9 syscall+0xbd4 #10 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11053 12018K 12034K 166960K 12144 0 pcb 17 12K 12K 166960K 17 0 rtable 241 6K 7K 166960K 363 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 3 1K 9K 166960K 7 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 2K 166960K 29 0 iov 0 0K 16K 166960K 12 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1335 84K 84K 166960K 1382 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 10 0K 0K 166960K 13 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 24 89K 125K 166960K 324 0 sigio 0 0K 0K 166960K 3 0 proc 58 99K 163K 166960K 482 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 48 0 in_multi 99 7K 7K 166960K 105 0 ether_multi 1 0K 0K 166960K 1 0 mrt 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 372 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 262 162K 176K 166960K 4616 0 UVM aobj 7 2K 2K 166960K 7 0 pinsyscall 45 90K 114K 166960K 1377 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 23 0 NDP 11 0K 2K 166960K 27 0 temp 47 8681K 8745K 166960K 4603 0 kqueue 15 22K 28K 166960K 67 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 57 0 54 1 0 1 1 0 8 0 rtentry 176 113 0 1 6 0 6 6 0 8 0 unpcb 144 176 0 160 2 0 2 2 0 8 1 syncache 336 8 0 8 1 0 1 1 0 8 1 tcpcb 736 85 0 80 2 0 2 2 0 8 1 arp 136 19 0 0 1 0 1 1 0 8 0 inpcb 328 272 0 263 5 0 5 5 0 8 3 ip6q 72 2 0 1 1 0 1 1 0 8 0 ip6af 40 5 0 3 1 0 1 1 0 8 0 nd6 152 25 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 456 0 0 29 0 29 29 0 8 0 art_table 40 457 0 0 5 0 5 5 0 8 0 art_node 32 113 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 2 1 0 1 1 0 8 1 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 10 0 2 1 0 1 1 0 8 0 shmpl 112 4 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1836 0 326 95 0 95 95 0 8 0 ffsino 296 1836 0 326 117 0 117 117 0 8 0 nchpl 144 2277 0 586 63 0 63 63 0 8 0 vnodes 216 1917 0 0 107 0 107 107 0 8 0 namei 1024 7010 0 7009 2 0 2 2 0 8 1 percpumem 16 50 0 0 1 0 1 1 0 8 0 kstatmem 264 24 0 0 2 0 2 2 0 8 0 scxspl 216 7429 0 7429 3 2 1 2 1 8 1 plimitpl 152 98 0 72 2 0 2 2 0 8 0 sigapl 424 607 0 554 7 0 7 7 0 8 0 knotepl 120 327 0 0 10 0 10 10 0 8 0 kqueuepl 224 77 0 66 2 0 2 2 0 8 1 pipepl 344 117 0 90 3 0 3 3 0 8 0 fdescpl 528 591 0 555 4 0 4 4 0 8 0 filepl 160 2776 0 2561 12 0 12 12 0 8 2 lockfpl 104 61 0 59 1 0 1 1 0 8 0 lockfspl 48 24 0 22 1 0 1 1 0 8 0 sessionpl 144 24 0 8 1 0 1 1 0 8 0 pgrppl 48 36 0 12 1 0 1 1 0 8 0 ucredpl 104 357 0 338 1 0 1 1 0 8 0 zombiepl 144 557 0 554 1 0 1 1 0 8 0 processpl 1232 607 0 554 5 0 5 5 0 8 0 procpl 664 922 0 858 7 0 7 7 0 8 1 sosppl 176 3 0 3 1 0 1 1 0 8 1 sockpl 752 508 0 480 9 0 9 9 0 8 5 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 4 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 132 0 0 17 0 17 17 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 18 0 0 3 0 3 3 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 208 0 0 13 0 13 13 0 8 0 bufpl 280 5195 0 118 363 0 363 363 0 8 0 anonpl 32 8282 0 0 67 0 67 67 0 246 0 amapchunkpl 152 14722 0 13877 34 0 34 34 0 158 1 amappl16 200 2412 0 2380 14 4 10 14 0 8 8 amappl15 192 48 0 48 1 1 0 1 0 8 0 amappl14 184 7 0 7 1 1 0 1 0 8 0 amappl13 176 399 0 398 1 0 1 1 0 8 0 amappl12 168 926 0 880 3 0 3 3 0 8 0 amappl11 160 5 0 5 1 1 0 1 0 8 0 amappl10 152 46 0 36 1 0 1 1 0 8 0 amappl9 144 248 0 248 1 1 0 1 0 8 0 amappl8 136 20 0 19 1 0 1 1 0 8 0 amappl7 128 134 0 133 1 0 1 1 0 8 0 amappl6 120 276 0 264 1 0 1 1 0 8 0 amappl5 112 83 0 75 1 0 1 1 0 8 0 amappl4 104 375 0 354 1 0 1 1 0 8 0 amappl3 96 2288 0 2178 3 0 3 3 0 8 0 amappl2 88 716 0 638 2 0 2 2 0 8 0 amappl1 80 10158 0 9606 14 0 14 14 0 8 0 amappl 88 3892 0 3699 5 0 5 5 0 92 0 uvmvnodes 80 106 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 6 0 0 1 0 1 1 0 8 0 uaddrrnd 24 591 0 554 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 591 0 554 1 0 1 1 0 8 0 vmmpekpl 168 6512 0 6483 2 0 2 2 0 8 0 vmmpepl 168 45853 0 43792 102 0 102 102 0 357 8 vmsppl 488 590 0 554 7 1 6 6 0 8 1 rwobjpl 80 16022 0 15056 24 0 24 24 0 8 2 pdppl 4096 1189 0 1108 109 24 85 97 0 8 4 pvpl 32 28912 0 0 234 0 234 234 0 265 0 pmappl 256 590 0 554 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 285 0 27 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8384bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x7b66f3f55430, count: 12 ddb{0}> trace x86_ipi_db(ffffffff8384bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x7b66f3f55430, count: -3 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833b6bee) at panic+0x1e5 __assert(ffffffff833f2b6a,ffffffff83347316,4e2,ffffffff8334734b) at __assert+0x29 uvm_pageunwire(fffffd8008b6b590) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffffd800f3697c8,d9cbac38000,d9cbac39000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffffd800f3697c8,fffffd806ad8b650,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffffd800f3697c8) at uvm_map_teardown+0x117 exit1(ffff80003c4402c0,0,0,1) at exit1+0x6fc sys_exit(ffff80003c4402c0,ffff80003c415140,ffff80003c415090) at sys_exit+0x1a syscall(ffff80003c415140) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76bb76a9a1c0, count: 4 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833b6bee) at panic+0x1e5 __assert(ffffffff833f2b6a,ffffffff83347316,4e2,ffffffff8334734b) at __assert+0x29 uvm_pageunwire(fffffd8008b6b590) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffffd800f3697c8,d9cbac38000,d9cbac39000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffffd800f3697c8,fffffd806ad8b650,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffffd800f3697c8) at uvm_map_teardown+0x117 exit1(ffff80003c4402c0,0,0,1) at exit1+0x6fc sys_exit(ffff80003c4402c0,ffff80003c415140,ffff80003c415090) at sys_exit+0x1a syscall(ffff80003c415140) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76bb76a9a1c0, count: -11