last executing test programs: 417.246087ms ago: executing program 4 (id=5): chmod(&(0x7f0000000040)='.\x00', 0xfc) (async) setuid(0xee01) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xa7210e10bc3c9d34) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x18c) fchdir(r0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='c\x00') (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100400088a8"]) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) 385.609854ms ago: executing program 2 (id=3): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x296, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) r1 = socket$inet6(0x18, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000200)="a53b", 0x2}], 0x1) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) sysctl$hw(&(0x7f0000000000)={0x6, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r4 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r4, &(0x7f0000000000), 0x10) getpeername$unix(r4, 0x0, &(0x7f00000000c0)) ioctl$VNDIOCCLR(r3, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) getsockopt$sock_linger(r1, 0xffff, 0x80, 0x0, &(0x7f0000001380)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_emit_ethernet(0x32, &(0x7f0000000180)={@empty, @local, [{[{0x88a8, 0x5, 0x0, 0x2}], {0x8100, 0x5}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @random="17780c47474e", @broadcast, @empty, @multicast2}}}}) 242.724619ms ago: executing program 4 (id=9): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000340)={0x10, 0x0, [{&(0x7f000005f000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f00000a7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000008e000/0x11000)=nil, &(0x7f0000090000/0x1000)=nil}, {&(0x7f00000a7000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil, 0x200000000000000}, {&(0x7f00000a3000/0x2000)=nil, &(0x7f000009e000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000091000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f000009d000/0x4000)=nil, &(0x7f000008e000/0x2000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f000079c000/0x3000)=nil, 0x1}, {&(0x7f00002ef000/0x3000)=nil, &(0x7f000009d000/0x2000)=nil}, {&(0x7f00000a6000/0x3000)=nil, &(0x7f00003cf000/0x3000)=nil}, {&(0x7f00000a1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f000037d000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f000009a000/0x4000)=nil, &(0x7f0000090000/0x2000)=nil}, {&(0x7f000009e000/0x4000)=nil, &(0x7f000009a000/0x2000)=nil}], './file0\x00', 0x6}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r0, &(0x7f0000000180)=""/148, 0x94) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0xc014575e, &(0x7f0000000000)={0xdb, './bus\x00'}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) r1 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r1, 0xc2c04200, &(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$FIOASYNC(r2, 0xc0107003, &(0x7f00000000c0)) mprotect(&(0x7f0000034000/0x3000)=nil, 0x3000, 0xdfe6f47f71dbed4c) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 241.660339ms ago: executing program 6 (id=7): r0 = syz_open_pts() (async) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) (async) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r1, 0x20006470, 0x0) (async) ioctl$TIOCSETA(r0, 0x802c7414, 0x0) (async) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000000080), &(0x7f0000000280), 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) syz_open_pts() (async) syz_open_pts() (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x0, 0xdac9, 0xfffdff80, 0x160350d, "04f0ee091a00041300000fe0ff2285080800", 0x1000004, 0x78}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000659000/0x2000)=nil, &(0x7f0000385000/0x4000)=nil, 0x2000080000000001}, {&(0x7f0000028000/0x1000)=nil, &(0x7f0000357000/0x3000)=nil, 0xffffffffbfffff7d}, {&(0x7f0000e63000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f00006f4000/0x1000)=nil, &(0x7f0000467000/0x1000)=nil, 0xeffffffffffffffd}, {&(0x7f00006c6000/0x4000)=nil, &(0x7f0000027000/0x2000)=nil, 0xffffffffffff7611}, {&(0x7f00007dd000/0x3000)=nil, &(0x7f00006c7000/0x4000)=nil, 0x8000000000000000}, {&(0x7f0000e64000/0x1000)=nil, &(0x7f0000162000/0x12000)=nil, 0x9}, {&(0x7f0000008000/0x3000)=nil, &(0x7f000015e000/0x5000)=nil, 0xfffffffffffffffe}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f44000/0x3000)=nil, 0xb7e}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000027000/0x1000)=nil, 0xa}, {&(0x7f0000257000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x10012b}, {&(0x7f000057c000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x40003fffc0000000}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffff7ffbffffff9}, {&(0x7f00006c7000/0x2000)=nil, &(0x7f0000257000/0x1000)=nil, 0x34}, {&(0x7f00007dd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1007f}], './file0/../file0\x00', 0x4}) (async) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000000080)={0x0}, 0x6a, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) (async) close(r3) (async) unveil(0x0, &(0x7f00000000c0)='r\x00') openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) 241.420759ms ago: executing program 3 (id=4): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000180)={0x2, 0x3}) r1 = socket(0x18, 0xc003, 0x3a) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) clock_getres(0x0, &(0x7f00000000c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xe, 0x0, 0x37) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x3}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) (async) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105727, &(0x7f0000000000)={&(0x7f0000000040)=[{0xdead4110, 0x2}], 0x1}) (async) ioctl$VT_WAITACTIVE(r0, 0x20007606, &(0x7f00000001c0)=0x9) setsockopt(r2, 0x1ff, 0xe, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 239.564391ms ago: executing program 2 (id=10): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000002c0)={0x10, 0x0, [{&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x9}, {&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x7}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xd3}, {&(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfff}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xb8a3}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xc148}, {&(0x7f0000004000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, 0xc4ae}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000006000/0x2000)=nil, 0x7f}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x5}, {&(0x7f0000004000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, 0xde}, {&(0x7f0000007000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x6}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xa593}], './file1\x00', 0x8}) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000000c0)="7441a00e4f0496696f1c0c18bba18da7c1071356b91d1b96842a96267c8849aaf4853961349648e6a3b3b95b41fd2c150916be8e035d522fc338020e0232acd03d6fbaf0529ba579510bd21cff63ae7ec4a9b827de3305b7ca668bb92a48c0cf0f150617546064f8b21c02c833c32cb616ce20bdeea0cb2d23f03956cb006e9752f9472aa93e5d6153af23ee12d034d5b1a7c65ed8b727f0049a3d7df24db83773dab7449bca5fc4b4", 0xa9) r2 = socket(0x11, 0x3, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x6c, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="fe6c7a4022fa6edbf6829f7d89a54578fc2d2be8dcd4ea47f568418d4191238ee7d093758b03ddc565a587860428b4771c6fd01e7d57d68d3069a76f172935931d4a5ff2", 0x44}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000300)="00231b000f4070632c2dec30c21761035c2532d7a0ea9200001f00385c24fc3be7b6e1a884658496", &(0x7f0000000000)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f00000000c0)={0x7, 0x101}, 0x8) close(r2) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) socketpair(0x20, 0x1, 0xd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = geteuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r7}}) lchown(&(0x7f00000001c0)='./file0\x00', r5, r7) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000080)) 238.787328ms ago: executing program 3 (id=11): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8004, 0xa, 0x43, 0x1}, {0x2, 0x8, 0x4, 0x7}, {0x6, 0x2, 0x8, 0xfffffffc}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="00231b000f40b0632c2dec30c21700410000808c602b4ae8e2a159e19be28dc575000804b9a05140af5adad2de48ad5ad3b7f0aad2ba7e67af72ac131e38c01375586d8a4961aa82ab078497760992f9969b11281ca47e75aec8bbf9dd31e6fc26b1dca7fce0c38078e1d33566f1a56e876f6d18", &(0x7f0000000000)=0x74, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe) ioctl$FIONREAD(r0, 0xc020697e, &(0x7f0000000100)) 238.447437ms ago: executing program 3 (id=12): mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) link(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='./file0\x00') setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x27ff9, 0x4, 0xfff5, 0x7fff, "0700a460190d070a7f00000004002fcaaed20500", 0x9, 0x40}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)="98b3c960fb635b491bbbec01601ab1921d9405ceb6c16a4196afc5daa51bb48d2055cfb9d8b43a4a00d3c32942b4ce4cac4de58bb41799103b2875d3237dc3fae5beeaf4133619a3c5bb62a6b92617f04ec1d91e913b8900ea1d010df7f5b7c327cae1566c67836c8de642b731ff", 0x6e}], 0x1) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 214.380226ms ago: executing program 1 (id=2): r0 = socket(0x2, 0x2, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f0000000140)=""/132, 0x84}, {&(0x7f0000000200)=""/158, 0x9e}, {&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000440)=""/182, 0xb6}], 0x6) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000040)=0x870, 0x4) setsockopt(r1, 0x0, 0x8, &(0x7f0000000080)='?', 0x1) dup2(r1, r0) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x90, 0xdc4, 0x564, 0x9cea, 0x0, 0x8000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000417000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, 0xfdfffffffffffff9}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000632000/0x4000)=nil, 0xc6}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x1000}, {&(0x7f00006b8000/0x4000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000508000/0x2000)=nil, 0x51c}, {&(0x7f0000039000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039fb}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x9e}], './file0\x00', 0xffbffffa}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x3, 0x0, 0xffffffffffffbffe, 0xff}) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x3, 0x4, 0x3, 0x205, '!\r\x00', 0x4, 0xffffffff}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, 0x0, 0x0) 80.516395ms ago: executing program 7 (id=14): nanosleep(&(0x7f00000025c0), &(0x7f0000001180)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x80) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f0000000040)={'./file0\x00', 0x0, 0x2, 0x9}) 77.787492ms ago: executing program 5 (id=6): mprotect(&(0x7f00000b9000/0x4000)=nil, 0x4000, 0x4) clock_gettime(0x4, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) minherit(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) 77.202772ms ago: executing program 5 (id=15): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$VNDIOCGET(0xffffffffffffff9c, 0xc4104603, &(0x7f0000000480)={'./bus\x00', 0x7, 0x1, 0x7fa}) r0 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10c) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000240)='./file0\x00', 0x401, 0x39) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x200000a, 0x101, 0x80000001, 0x81b0, 0x4, 0x10, [{0x0, 0xffff65d5, 0x4, 0x71002}, {0x6, 0x9, 0x2, 0xfffffff9}, {0x2104, 0xf88, 0x401, 0x9}, {0x4, 0x800, 0x8009, 0x7}, {0x1, 0x3, 0x14, 0x807}, {0x4, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x3, 0x803, 0x7, 0xa}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x6, 0x4}, {0xfffffffe, 0x10001, 0xc, 0x6}, {0x8, 0x9, 0x8, 0x2}, {0x8, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000001}, {0x0, 0x20000001, 0xfff, 0x9}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f0000000400)={0x0, 0x10, 0x0}) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) r3 = socket(0x11, 0x3, 0x0) r4 = socket(0x1, 0x5, 0x70) chflagsat(r2, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0xfff) sendto$unix(r3, &(0x7f0000000300)="b1000501000000050000000107000000331c13fecea70500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297be1aa050400ce9409000000bbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2325768abfba09a214cc8adfbfab11ce0000080ce37193f834370b0000eb376640c9f2746700"/177, 0xb1, 0x2, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) setregid(r6, 0xffffffffffffffff) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000900)={0x0}, 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000940)={{0xdb49, 0x0, 0x0, 0x0, r6, 0x20, 0x1}, 0x4, 0x9, r7, 0x0, 0x7, 0x101, 0x6db, 0x6}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) ioctl$BIOCSRTIMEOUT(r2, 0xc0307006, &(0x7f0000000080)={0x1, 0x10}) 72.738067ms ago: executing program 0 (id=1): socket(0x2, 0x3, 0x0) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0x6, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x7, 0xc49, 0x4, 0x8000002a, 0x0, 0xb28f, 0x80000002, 0x61, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x500], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x5, 0x7ffffffd, 0x0, 0x8000000000000, 0x0, 0x7f], [0x400000008, 0x9, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x8, 0x2, 0x8000, 0x6], [{0x7ff, 0x90c, 0xffffffff, 0x7d06}, {0x6, 0x202, 0x6, 0x3}, {0x58, 0xfffffffd, 0xfffffffe, 0xffc}, {0x1009, 0x0, 0x8, 0x6}, {0x0, 0x400, 0x80004, 0x5}, {0x8, 0x2000, 0x40003, 0x2}, {0xff00, 0x0, 0x4}, {0x5f9, 0x9, 0x1fd, 0x459}], {0x0, 0x5, 0x1, 0x849}, {0x203, 0x40010, 0x200006, 0x5}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0x6, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x7, 0xc49, 0x4, 0x8000002a, 0x0, 0xb28f, 0x80000002, 0x61, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x500], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x5, 0x7ffffffd, 0x0, 0x8000000000000, 0x0, 0x7f], [0x400000008, 0x9, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x8, 0x2, 0x8000, 0x6], [{0x7ff, 0x90c, 0xffffffff, 0x7d06}, {0x6, 0x202, 0x6, 0x3}, {0x58, 0xfffffffd, 0xfffffffe, 0xffc}, {0x1009, 0x0, 0x8, 0x6}, {0x0, 0x400, 0x80004, 0x5}, {0x8, 0x2000, 0x40003, 0x2}, {0xff00, 0x0, 0x4}, {0x5f9, 0x9, 0x1fd, 0x459}], {0x0, 0x5, 0x1, 0x849}, {0x203, 0x40010, 0x200006, 0x5}}}) recvmmsg(r1, &(0x7f0000000540)={&(0x7f0000000500)={&(0x7f0000000080)=@in, 0xc, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)}], 0x5, &(0x7f0000000400)=""/201, 0xc9}, 0x6}, 0x10, 0x2000, &(0x7f0000000580)={0x1000, 0x8000000000000000}) close(r0) (async) close(r0) kevent(r2, &(0x7f00000000c0), 0xbe96, 0x0, 0xffffffff, 0x0) 71.200267ms ago: executing program 7 (id=16): ioctl$VT_GETSTATE(0xffffffffffffff9c, 0x40067664, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000001440)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 70.637655ms ago: executing program 7 (id=17): sysctl$kern(&(0x7f00000000c0), 0x1, &(0x7f0000000180)="71f91e3471ac0058bc5a91501d34a34b8e5f84cf71b59c80fe19759cc370820c8c8cb0764e98e6ab3c32c4ff115fd2731f7772855b5f4dd53251b01a9ca4395e4ad00e3207f829c48b8cd7868e6eccc77a61cff32969b1073adbb097c6026e46dfec806a522a6b25adcfffd22ca54b852ce7b79b44ec4f3a5088cb7cf3f5cdd793277a0868222e3fe7bf646da11dc5a68d029b8c0556e50c9487ef00898ca55240363bab1bb0f30a6d50aa431319fc0e0213adbf4a2b6759c6994e22e987f4fa2bef6b1c80fe6a26e0cc936d8ac6a50bd909fda809c2b751b94ed02b6bc4bb3022967e425b508bc71a39003bd65b58dee9e893e84e45fb5700"/261, &(0x7f0000000080)=0x105, 0x0, 0x0) 70.21505ms ago: executing program 3 (id=18): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x2000003, 0x101, 0x80000001, 0x4, 0x10001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8000, 0x3}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x5, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0xfffd}, {0x6, 0x803, 0x8, 0x8}, {0x2, 0x5, 0x5, 0x9}, {0x6a72, 0x8009, 0x1000, 0x4}, {0x7, 0x10001, 0xb, 0x3}, {0x408, 0x5, 0x8, 0x6}, {0x80000000, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffd, 0x60, 0x6}, {0x1000c, 0x5, 0x9, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) read(r2, 0x0, 0x0) getsockopt(r1, 0x10, 0x7, &(0x7f0000002240)=""/4109, &(0x7f0000000040)=0x100d) ioctl$FIONREAD(r0, 0x81206919, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x3, 0x0) setsockopt(r4, 0x1000000029, 0x25, &(0x7f0000000000)="5ab7776a", 0x4) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000000c0)={0x1, 0x7d, 0x0, 0x3ce50fd3, "e3f4a35b7b756743698c9750d90e08d5bbcd547b", 0xffffffbf, 0x800}) 68.95893ms ago: executing program 7 (id=19): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f0000000040)=0x5) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000080)=0x4419) r1 = syz_open_pts() ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f00000000c0)={0x9, 0x9, 0x50, 0x54d7}) mknod(&(0x7f0000000100)='./file0\x00', 0x10, 0x6) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x1, 0x30) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r1}) ioctl$TIOCMGET(r1, 0x4004746a, &(0x7f0000000200)) ioctl$BIOCGRSIG(r2, 0x40044273, &(0x7f0000000240)) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000280)={""/16, @ifru_addr=@un=@abs}) getpeername$unix(r2, &(0x7f00000002c0)=@file={0x0, ""/3}, &(0x7f0000000300)=0x5) setrlimit(0x0, &(0x7f0000000340)={0x1, 0x7}) ioctl$BIOCSFILDROP(r2, 0x80044279, &(0x7f0000000380)=0x5) ioctl$TIOCSTSTAMP(r2, 0x8008745a, &(0x7f00000003c0)={0x0, 0x3c18fbe0}) ioctl$TIOCGETD(r1, 0x4004741a, &(0x7f0000000400)) setrlimit(0x4, &(0x7f0000000440)={0x61dfbe86, 0x2}) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000480)) r3 = kqueue() pwrite(r3, &(0x7f00000004c0)="35023212ff8245d2a37739ccdb99752fdccd5f9c01191416914710ddc396ddf57ae3e2be9bbc159eb7e71d8d7f37c5f4f401a8f135a0c51878e446bb60b0036109516773484a769c469105da613f2dc60abfa9b17055b24ef601201788ecb9c8bfb4165a", 0x64, 0x6) pread(r2, &(0x7f0000000540)="a68dcccc0878ce3c66926965eb86b212619cce916beeb414fce533f427372a1057c3e2bd07314010a8ac47a91872b3531ea29fbd802d4738a5d795822b9afd757153eb0e91ee9b21b1321da696fe22273d894c835bea43c1cc6894aa", 0x5c, 0x6) r4 = dup(r3) ioctl$VMM_IOC_INTR(r4, 0x800c5606, &(0x7f00000005c0)={0x4, 0x8, 0xff}) faccessat(r2, &(0x7f0000000600)='./file0\x00', 0x8, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) close(r5) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sysctl$vm_swapencrypt(&(0x7f00000006c0)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000700)="67cd6b79af97abcc0d1213b209ca78a128a39fe9dd53865cd058eb6b0720864d5762a14ca7d0c8bd64047580097c017f74aeb1a1e0009874e6b36279a0dd479ba31a5356e016622ea8794b", &(0x7f0000000780)=0x4b, &(0x7f00000007c0)="24dfaaee7591f77a44f2ec046208604bab91705eddad06ee45d436648a95be59958ab22a41882c8b96fcc722f6b2d9d34fc3d388b03e8f44a548afeaa79b6d7aed9ea1b0240fe7c5959ac362d912b9f1919141065333d0cc35d82ebb898c1d469064d8", 0x63) lseek(r5, 0xc, 0x93afb32c43d8847f) setsockopt(r6, 0x1, 0x7fffffff, &(0x7f0000000840)="5ca716f38ac79bb5699f1c320186c2a8bf14f18bfd798d05313f0eee9c53e86ba3939978baffa93f6f5690dbdad710ca72c442af4062dfe6c9ca173696a83760", 0x40) 18.132694ms ago: executing program 7 (id=20): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)="f305fe9f0156bbf416ca74101cfb82b1b9d974846769899f80bcf46eb6d6fb3d43d60be2b5d0f0edafc64c5b996af0a81a1386a9ae5b032338dc1538390d559e97b678c5a815c1eef11437", 0x4b) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0x8020697a, &(0x7f0000000100)) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)="f305fe9f0156bbf416ca74101cfb82b1b9d974846769899f80bcf46eb6d6fb3d43d60be2b5d0f0edafc64c5b996af0a81a1386a9ae5b032338dc1538390d559e97b678c5a815c1eef11437", 0x4b) (async) socket(0x18, 0x3, 0x0) (async) ioctl$FIONREAD(r0, 0x8020697a, &(0x7f0000000100)) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) 14.583102ms ago: executing program 5 (id=21): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000040)={0x10, 0x13d9, [{&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x9}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x138}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x80000001}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff6000/0x8000)=nil, 0x7}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0xb}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x5}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, 0x2}, {&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, 0xffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, 0xf}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x101}, {&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, 0xd96}, {&(0x7f0000ff5000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}], './file0\x00', 0x8}) (async) connect$unix(0xffffffffffffff9c, &(0x7f0000000240)=@abs={0x1, 0x0, 0x1}, 0x8) (async) r1 = syz_open_pts() ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000280)={0x9, 0x2, 0x1, 0x2}) (async) sendto$unix(0xffffffffffffffff, &(0x7f00000002c0)="1a83cfe5ef482e1203be28bd612f7dba871102a7e505d9794a9a37c7a5c3e0472da6dfa4112fc1008e44", 0x2a, 0x8, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0xa) (async) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) sendto$inet(r2, &(0x7f0000000380)="31b1bcb8db254a0f01e2582bbf3cc364e404e90e6467b926b65f2b0d509cd43f509e87decf48c983a0f0d406ce681ae07663f419f85e2c03641d459d8d99172abe80006bd32ac4d635b031045747d1c7d71ef90e7f7eda90c7a0d0027a4551417939eadecc99a83b743b9a7268c7a272d9d697f786ff6ac1576a8447253107806adefee8b95055034dae17935bbc7a163d36cbaa69b6737f001d9ce5f0b7ead2940db9e3d8c106aaf3ba1c7cc40ab669e4bc2eb4355585", 0xb7, 0x2, &(0x7f0000000440)={0x2, 0x2}, 0xc) (async) ioctl$TIOCSBRK(r2, 0x2000747b) (async, rerun: 64) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) (async, rerun: 64) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000004c0)={0x0}, 0xc) fcntl$setown(r2, 0x6, r5) setsockopt(r4, 0x5, 0x10001, &(0x7f0000000500)="dda1f27732bb74ae120ae5c6b5483ef5a59321281b8d2ed0834ea2100925d35225", 0x21) (async) sysctl$net_inet6_icmp6(&(0x7f0000000540)={0x4, 0x18, 0x3a, 0xf}, 0x4, &(0x7f0000000580)="4e7356dde6655772509dfbb4e9ddc1fff3cd19081d4c7d3f638f45a1dff100537c212a5d345084b3ab8b419d67caf6f327f059fb805b1abac34166768cbe87570c3418dfd96073237fd049cd6e5c30e324c6178064bbd9235c29b5c8d9655b0ac1966e74a1bd18eb97b5b87d6892bdcf61d4a8e0dd1e0fb48f72818f4e6adfd5b26af3203f46adba9a9dd5eb34d922d6ca6645c7dca91f9920e00a1b05558313b336a012fd252a55cf2cf3719a45be1a740b761c26116bd3c5aef8136926f55b5de00eaf3f", &(0x7f0000000680)=0xc5, &(0x7f00000006c0)="c0dfb3268d87a6078eb282c3beebb376bfec5d47c2cdf707aa47d2df065e54a7af76fbbf15b2cbcc8fc1888fdd5bc6ebfbd45c7762f3b440cb26629756a1ffa8f3c2eecb6059d0585ad6b77080b51713a37dcda9b84a382038264b632a53627f19baf15b648c70e63c6cd3156602406b87b08bac69ad4e1ee72c1d60645f04c828a91f9c431eb2655cd0ec1e29fffb014f1912510f4d05e9f22f3261da1ece3c5587e2cb3d82a0a74f30869f5f3e18566ae07d549e42eed3b81b79a8b43d08c30ef15b1f160aafd72daf4462b87f979966367d27a9", 0xd5) r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000007c0), 0x10, 0x0) ioctl$VMM_IOC_INFO(r6, 0xc0185603, &(0x7f0000001800)={0x1000, 0x0, &(0x7f0000000800)=""/4096}) (async, rerun: 32) ioctl$TIOCSDTR(r4, 0x20007479) (async, rerun: 32) sendmsg$unix(r2, &(0x7f00000019c0)={&(0x7f0000001840)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000001980)=[{&(0x7f0000001880)="9569ae82e65d1a47a423cc9869eba77b1a67ab1572a09e86fe14c70cb2dccea23e27919303e4a97c55781ea46362ce3e1291d74b4de3eadf069f2cbb530a0b9dce737ebf52f4eb657f8989ed76897d7a", 0x50}, {&(0x7f0000001900)="6870b4b077c76def5a04ed55a1851ef3c7ccfc412a42b825321166378e1dcd9a5733da4e79b674f23952dedfc38767090326e33d096d25bb3ab752769c4f98fd0302f0120e40d202fb4d7fde1a825d82f667d4cc91", 0x55}], 0x2, 0x0, 0x0, 0x404}, 0x805) ioctl$VMM_IOC_RESETCPU(r6, 0x82405605, &(0x7f0000001a00)={0x6, 0x7ff, {[0x2, 0x2, 0xfffffffffffffe7a, 0xc, 0x38000000, 0x9, 0x2, 0x1, 0x0, 0x84d, 0xd, 0x7, 0x0, 0x8, 0xfff, 0xb, 0x3, 0x3], [0xdee, 0xfffffffffffffe00, 0x3, 0x9, 0xb, 0x8, 0xc, 0x4dd, 0x7fffffff], [0x9, 0x6, 0xfffffffffffffff9, 0x3, 0x0, 0x3, 0x10], [0x1800000000000000, 0x3, 0x1, 0x51, 0x882, 0x9], [{0x3, 0x0, 0x7fffffff, 0x9}, {0x1, 0x7, 0x6, 0xd}, {0x400, 0x3, 0x374a, 0x9d00}, {0x2, 0x4, 0xffffff81, 0x7fc}, {0x5, 0x7, 0x7, 0x100000000}, {0x1, 0x5, 0x2, 0x1}, {0x6, 0x101, 0x2d27, 0x200}, {0x800, 0x59, 0x4, 0x3}], {0x4, 0x6, 0x5, 0x2}, {0xd3b7, 0x0, 0x8000, 0xb6}}}) sysctl$net_inet_ipcomp(&(0x7f0000001c40)={0x4, 0x2, 0x6c, 0x1}, 0x4, &(0x7f0000001c80)="04851475dc10902dd48f5165efdaba75d3a2e63ded5edc464d52eb3a7becbaedbd96ebb573fd28b2b468045b877f5d3302b81dd3fc3bb419585f8c63e47193f5a3f49d6e410bfa5af6321ac987fd022aab0da28b5e29f4c4bc2f402c1b2d", &(0x7f0000001d00)=0x5e, &(0x7f0000001d40)="8fad6c2ea14ef369da5283e597c3682f79270011f48743409728cffe06885c9adf7e3426107d8e66410c06bba51588ffb9c262a51cc74c94076819748338f8060630341fa56cbd2d09850e9619ed0ec099facaf4e1036ea219b293c1dadd0acad561a7c217c4750e5802cd3fa8ce9224c971cef0ad4792af1ff0d9cdf15f", 0x7e) (async, rerun: 32) r7 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001dc0), 0x10000, 0x0) (rerun: 32) fcntl$lock(r7, 0x1b, &(0x7f0000001e00)={0x2, 0x1, 0x4, 0x100, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001e40)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000001e80), &(0x7f0000001ec0)=0xc) (async) ioctl$BIOCSFILDROP(r4, 0x80044279, &(0x7f0000001f00)=0x2) (async) ioctl$VMM_IOC_WRITEREGS(r2, 0x82485608, &(0x7f0000001f40)={0x4, 0xe, 0x0, {[0x8, 0x5, 0x1, 0x1e62, 0x9d7b, 0x8, 0x7f, 0x50568b49, 0x0, 0x6, 0x17, 0x1, 0x8, 0x0, 0x6, 0x1301, 0x2, 0x5], [0x6, 0x6, 0x6, 0x574c7ff6, 0x912, 0xdd5a, 0x6, 0x0, 0x0, 0x9af], [0x10, 0x93ac, 0x8, 0xc, 0xe9f, 0x4db, 0x100], [0x5, 0x8, 0x3, 0x9, 0x94, 0x2], [{0x200, 0xd, 0x81, 0x3}, {0x9, 0x0, 0xfffffff8, 0x6}, {0x7f, 0x9, 0x5, 0xf}, {0x3, 0x7, 0x5, 0x1}, {0x1, 0x5, 0x6, 0x9}, {0x7, 0x5, 0x10, 0x1}, {0x0, 0x6, 0x1, 0x30000000000}, {0x4, 0x7, 0x2, 0x10}], {0x6, 0x400, 0x807c, 0x9}, {0xfe00, 0x40, 0x6, 0x7}}}) (async) sysctl$ddb(&(0x7f00000021c0)={0x9, 0x7}, 0x2, &(0x7f0000002200)="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", &(0x7f0000003200)=0x1000, &(0x7f0000003240)="7a0560ebe4ae974b2173cefc007d955da225b5eaa2348de0eb2982bdf4105695770feea36006e1902d8f8562a7763a2d8d8958afc3caa4fac7069895c66e65a7f9b33772db5b8d8006a09dfd7be8be82c5143cb2dfae443bbad791c10aac5a09cb41bf6271f460122d8b095a9af19caf64b33a4e24a1", 0x76) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) bind$unix(r4, &(0x7f00000032c0)=@abs={0x1, 0x0, 0x3}, 0x8) (async, rerun: 32) ioctl$WSMUXIO_LIST_DEVICES(r3, 0xc1045763, &(0x7f0000003300)={0x7, [{0x2, 0x9}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x3, 0x7ff}, {0x1, 0x7}, {0x1, 0xff}, {0x1, 0x4}, {0x2, 0x4}, {0x2, 0x8}, {0x1, 0xe445}, {0x6, 0x7}, {0x2, 0x80}, {0x1, 0x2}, {0x2}, {0x2, 0x8}, {0x1, 0x10000}, {0x1, 0x1000}, {0x1}, {0x3, 0x3f}, {0x2, 0x8}, {0x3, 0x77}, {0x2, 0x541}, {0x3, 0x1}, {0x2, 0x8000}, {}, {0x3, 0x3}, {0x1, 0x5}, {0x2, 0xd}, {0x2, 0xffff945a}, {0x3, 0x6}, {0x3, 0x5984}]}) 1.584644ms ago: executing program 5 (id=22): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = shmget$private(0x0, 0x4000, 0x6b, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x612, 0x0) write(r2, 0x0, 0x0) r4 = socket(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000040)={0x8, 0xfffffffffffffffd, 0x4008, 0x8000800000000003, 0x10001, 0x3, 0x4c, 0x5}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) shutdown(r4, 0x2) recvmmsg(r3, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10, 0x2842, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSFILDROP(r5, 0x80044279, &(0x7f0000000000)=0x2) close(0xffffffffffffffff) setpgid(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) 0s ago: executing program 7 (id=23): r0 = socket(0x18, 0x3, 0x0) r1 = socket(0x18, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x2, r1) close(r2) socket(0x18, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x84, 0x3ff}, 0x400, 0x40000010000, 0x0, 0x0, 0x200000001, 0x9, 0x1, 0x6}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt(r0, 0x29, 0x2c, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000a80)=ANY=[@ANYRESOCT], 0x401, 0x0) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$FIOASYNC(r3, 0x80047469, &(0x7f00000000c0)=0x5) readv(r4, &(0x7f0000000680)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x28d) writev(r3, &(0x7f0000001880)=[{&(0x7f00000004c0)="33f57cbd9b7a3dce024abd0a4458ebe67b96abcc9815f01b7384118224bac83dd8e2f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb02fcbb032f1cd7719778b73a00610bbc2cda7a2357f162165a18ec7a8361d61e5f202c9c6839ada531b7f39a0c09140e3052f9116a0a4d3d422542a855d3257c406d5788afe863c7854a8c4906fe9008dcaf7540ee", 0xfdf5}, {&(0x7f00000001c0)="4ac86e07b6f5cf353ce773366d0d1462532e49bb326d1951a16fadedf93ecbca2089c60264be4f5368f05fb89ffcee8bcc1f30c0cd028f53323eed00", 0x3c}, {&(0x7f00000002c0)="8072f965e5368d8a2ce261ea12ce28665881a3c985", 0x15}], 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. panic: kernel diagnostic assertion "(pg->pg_flags & (PQ_INACTIVE|PQ_ACTIVE)) == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/uWvAmR/NIuvNmG_:p aSgeP.Lc "N,O Tl iLnOeW E1R3E0D9 ON SStYoSpCpeAdLL a t91 1232398232 EXIT 0 a db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *409992 41320 0 0 0x4000000 0 syz-executor 511237 56813 0 0x2 0 1 syz-executor db_enter() at db_enter+0x25 panic(ffffffff833b4474) at panic+0x1e5 __assert(ffffffff833f108e,ffffffff833e6fa0,51d,ffffffff83424d02) at __assert+0x29 uvm_pageactivate(fffffd8008067790) at uvm_pageactivate+0x1e3 uvm_fault_lower_lookup(ffff80003c469360,ffff80003c469398,ffff80003c4692e0) at uvm_fault_lower_lookup+0x2a4 uvm_fault_lower(ffff80003c469360,ffff80003c469398,ffff80003c4692e0) at uvm_fault_lower+0x89 uvm_fault(fffffd800f6ad7c0,200000002000,0,1) at uvm_fault+0x274 kpageflttrap(ffff80003c469510,200000002540) at kpageflttrap+0x2f4 kerntrap(ffff80003c469510) at kerntrap+0x19c alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b sys_pwritev(ffff8000363dd780,ffff80003c469840,ffff80003c469790) at sys_pwritev+0x67 syscall(ffff80003c469840) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xeed879d28e0, count: 1 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: kernel diagnostic assertion "(pg->pg_flags & (PQ_INACTIVE|PQ_ACTIVE)) == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1309 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff833b4474) at panic+0x1e5 __assert(ffffffff833f108e,ffffffff833e6fa0,51d,ffffffff83424d02) at __assert+0x29 uvm_pageactivate(fffffd8008067790) at uvm_pageactivate+0x1e3 uvm_fault_lower_lookup(ffff80003c469360,ffff80003c469398,ffff80003c4692e0) at uvm_fault_lower_lookup+0x2a4 uvm_fault_lower(ffff80003c469360,ffff80003c469398,ffff80003c4692e0) at uvm_fault_lower+0x89 uvm_fault(fffffd800f6ad7c0,200000002000,0,1) at uvm_fault+0x274 kpageflttrap(ffff80003c469510,200000002540) at kpageflttrap+0x2f4 kerntrap(ffff80003c469510) at kerntrap+0x19c alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b sys_pwritev(ffff8000363dd780,ffff80003c469840,ffff80003c469790) at sys_pwritev+0x67 syscall(ffff80003c469840) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xeed879d28e0, count: -14 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c469000 rbx 0xffffffff8389fe07 cpu_info_full_primary+0x2e07 rdx 0 rcx 0xffff8000363dd780 rax 0xffffffff8389eff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xbc32de1861520de5 r11 0xc49116805f99c1df r12 0xffffffff8389fc08 cpu_info_full_primary+0x2c08 r13 0 r14 0 r15 0x1 rip 0xffffffff8174fac5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c468ff0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=409992 pid=41320 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000337d2d18,0xffffffff838d8230 process=0xffff8000337d7510 user=0xffff80003c464000, vmspace=0xfffffd800f6ad7c0 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 41320 500611 76516 0 2 0 syz-executor 41320 284695 76516 0 2 0x4000c80 syz-executor *41320 409992 76516 0 7 0x4000000 syz-executor 44486 305012 20909 0 2 0xc80 syz-executor 44486 40076 20909 0 3 0x4000080 kqread syz-executor 44486 391722 20909 0 3 0x4000080 fsleep syz-executor 14190 158848 10020 0 2 0xc80 syz-executor 14190 195831 10020 0 3 0x4000080 fifor syz-executor 14190 451743 10020 0 3 0x4000080 fsleep syz-executor 14190 228121 10020 0 3 0x4000080 fsleep syz-executor 60590 521820 18547 0 2 0xc80 syz-executor 60590 363857 18547 0 3 0x4000080 sbwait syz-executor 60590 78282 18547 0 3 0x4000080 fsleep syz-executor 82740 100292 69472 0 2 0xc80 syz-executor 82740 375871 69472 0 3 0x4000080 kqsel syz-executor 82740 493849 69472 0 3 0x4000080 fsleep syz-executor 93499 332527 48055 0 2 0xc80 syz-executor 93499 262402 48055 0 3 0x4000080 piperd syz-executor 93499 498367 48055 0 3 0x4000080 fsleep syz-executor 56813 511237 10350 0 7 0x2 syz-executor 42375 332997 10350 0 2 0xc82 syz-executor 20909 144699 10350 0 2 0xc82 syz-executor 48055 40394 10350 0 2 0xc82 syz-executor 76516 321709 10350 0 2 0xc82 syz-executor 69472 237695 10350 0 2 0xc82 syz-executor 18547 119602 10350 0 2 0xc82 syz-executor 10020 219147 10350 0 2 0xc82 syz-executor 10350 374171 63706 0 3 0x82 kqread syz-executor 63706 10769 35947 0 3 0x10008a sigsusp ksh 35947 28258 58977 0 3 0x98 kqread sshd-session 58977 405456 53637 0 3 0x92 kqread sshd-session 52573 46728 1 0 3 0x100083 ttyin getty 53637 110234 1 0 3 0x88 kqread sshd 19486 47847 90048 74 3 0x1100092 bpf pflogd 90048 27860 1 0 3 0x80 sbwait pflogd 3390 436213 62693 73 3 0x1100090 kqread syslogd 62693 64599 1 0 3 0x100082 sbwait syslogd 80282 455123 1 0 3 0x100080 kqread resolvd 48782 376855 34201 77 3 0x100092 kqread dhcpleased 82727 498832 34201 77 3 0x100092 kqread dhcpleased 34201 87308 1 0 3 0x80 kqread dhcpleased 19500 382637 0 0 3 0x14200 bored smr 22240 381972 0 0 2 0x14200 zerothread 72701 141733 0 0 3 0x14200 aiodoned aiodoned 44097 333886 0 0 3 0x14200 syncer update 69193 326112 0 0 3 0x14200 cleaner cleaner 26747 15090 0 0 2 0x14200 reaper 87973 462158 0 0 3 0x14200 pgdaemon pagedaemon 57371 242286 0 0 3 0x14200 bored viomb 27288 67953 0 0 3 0x40014200 acpi0 acpi0 75892 394189 0 0 3 0x40014200 idle1 46134 81855 0 0 3 0x14200 bored softnet1 5279 50428 0 0 3 0x14200 bored softnet0 7658 441000 0 0 3 0x14200 bored systqmp 15909 364070 0 0 3 0x14200 bored systq 90507 232840 0 0 3 0x14200 tmoslp softclockmp 95235 356086 0 0 3 0x40014200 tmoslp softclock 93630 43408 0 0 3 0x40014200 idle0 1 423711 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 41320 (syz-executor) thread 0xffff8000363dd780 (409992) shared rwlock uobjlk r = 0 (0xfffffd8069ad7400) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_lower_lookup+0x53 #3 uvm_fault_lower+0x89 #4 uvm_fault+0x274 #5 kpageflttrap+0x2f4 #6 kerntrap+0x19c #7 alltraps_kern_meltdown+0x7b #8 _copyin+0x5b #9 sys_pwritev+0x67 #10 syscall+0xbd4 #11 Xsyscall+0x128 shared rwlock vmmaplk r = 0 (0xfffffd800f6ad8c0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 kpageflttrap+0x2f4 #6 kerntrap+0x19c #7 alltraps_kern_meltdown+0x7b #8 _copyin+0x5b #9 sys_pwritev+0x67 #10 syscall+0xbd4 #11 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10201 11153K 11194K 166960K 11321 0 pcb 17 12K 12K 166960K 30 0 rtable 237 6K 7K 166960K 352 0 pf 35 17K 18K 166960K 48 0 ifaddr 43 7K 7K 166960K 46 0 ifgroup 55 2K 2K 166960K 57 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 72 0 ioctlops 0 0K 4K 166960K 1491 0 iov 0 0K 12K 166960K 3 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1344 84K 85K 166960K 1384 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 155 0 proc 70 115K 147K 166960K 531 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 49 228K 228K 166960K 49 0 exec 0 0K 1K 166960K 373 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 255 156K 161K 166960K 3172 0 UVM aobj 5 2K 2K 166960K 5 0 pinsyscall 42 84K 108K 166960K 1279 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 28 2K 2K 166960K 29 0 temp 38 8666K 8730K 166960K 4774 0 kqueue 16 26K 26K 166960K 25 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 36 0 33 1 0 1 1 0 8 0 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 52 0 29 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 13 0 9 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 82 0 71 2 0 2 2 0 8 1 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 1 0 1 1 0 1 1 0 8 1 pfstscr 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 19 0 0 1 0 1 1 0 8 0 pfstkey 128 19 0 0 1 0 1 1 0 8 0 pfstate 448 18 0 0 2 0 2 2 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 453 0 0 29 0 29 29 0 8 0 art_table 40 454 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1606 0 87 96 0 96 96 0 8 0 ffsino 296 1606 0 87 118 0 118 118 0 8 0 nchpl 144 1823 0 112 64 0 64 64 0 8 0 vnodes 216 1702 0 0 95 0 95 95 0 8 0 namei 1024 5525 0 5525 1 0 1 1 0 8 1 percpumem 16 51 0 1 1 0 1 1 0 8 0 kstatmem 264 28 0 2 2 0 2 2 0 8 0 scxspl 216 5955 0 5955 3 1 2 2 1 8 2 plimitpl 152 32 0 13 1 0 1 1 0 8 0 sigapl 424 463 0 415 7 0 7 7 0 8 1 knotepl 120 64 0 0 2 0 2 2 0 8 0 kqueuepl 224 25 0 11 1 0 1 1 0 8 0 pipepl 344 121 0 93 3 0 3 3 0 8 0 fdescpl 528 447 0 416 3 0 3 3 0 8 0 filepl 160 1615 0 1379 11 0 11 11 0 8 0 lockfpl 104 11 0 8 1 0 1 1 0 8 0 lockfspl 48 7 0 4 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 31 0 14 1 0 1 1 0 8 0 ucredpl 104 141 0 127 1 0 1 1 0 8 0 zombiepl 144 417 0 415 1 0 1 1 0 8 0 processpl 1232 463 0 415 5 0 5 5 0 8 0 procpl 664 513 0 452 6 0 6 6 0 8 0 sockpl 752 170 0 132 5 0 5 5 0 8 0 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 109 0 0 14 0 14 14 0 8 0 mcl2k 2048 25 0 0 4 0 4 4 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 154 0 0 10 0 10 10 0 8 0 bufpl 280 2348 0 130 159 0 159 159 0 8 0 anonpl 32 5477 0 0 45 0 45 45 0 246 0 amapchunkpl 152 9178 0 8532 32 0 32 32 0 158 4 amappl16 200 2017 0 2000 5 0 5 5 0 8 3 amappl15 192 9 0 8 1 0 1 1 0 8 0 amappl14 184 51 0 51 1 0 1 1 0 8 1 amappl13 176 442 0 441 1 0 1 1 0 8 0 amappl12 168 868 0 824 3 0 3 3 0 8 0 amappl11 160 6 0 6 1 0 1 1 0 8 1 amappl10 152 47 0 33 1 0 1 1 0 8 0 amappl9 144 249 0 249 1 0 1 1 0 8 1 amappl8 136 25 0 23 1 0 1 1 0 8 0 amappl7 128 80 0 79 1 0 1 1 0 8 0 amappl6 120 281 0 268 1 0 1 1 0 8 0 amappl5 112 74 0 64 1 0 1 1 0 8 0 amappl4 104 409 0 380 1 0 1 1 0 8 0 amappl3 96 1469 0 1356 5 1 4 4 0 8 1 amappl2 88 520 0 464 2 0 2 2 0 8 0 amappl1 80 9219 0 8628 15 0 15 15 0 8 1 amappl 88 2447 0 2269 5 0 5 5 0 92 0 uvmvnodes 80 99 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 447 0 416 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 447 0 416 1 0 1 1 0 8 0 vmmpekpl 168 5484 0 5446 2 0 2 2 0 8 0 vmmpepl 168 36862 0 34953 87 0 87 87 0 357 1 vmsppl 488 446 0 415 5 0 5 5 0 8 0 rwobjpl 80 13788 0 12765 25 1 24 24 0 8 1 pdppl 4096 901 0 830 97 12 85 85 0 8 14 pvpl 32 11508 0 0 93 0 93 93 0 265 0 pmappl 256 446 0 415 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 267 0 14 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff833b4474) at panic+0x1e5 __assert(ffffffff833f108e,ffffffff833e6fa0,51d,ffffffff83424d02) at __assert+0x29 uvm_pageactivate(fffffd8008067790) at uvm_pageactivate+0x1e3 uvm_fault_lower_lookup(ffff80003c469360,ffff80003c469398,ffff80003c4692e0) at uvm_fault_lower_lookup+0x2a4 uvm_fault_lower(ffff80003c469360,ffff80003c469398,ffff80003c4692e0) at uvm_fault_lower+0x89 uvm_fault(fffffd800f6ad7c0,200000002000,0,1) at uvm_fault+0x274 kpageflttrap(ffff80003c469510,200000002540) at kpageflttrap+0x2f4 kerntrap(ffff80003c469510) at kerntrap+0x19c alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b sys_pwritev(ffff8000363dd780,ffff80003c469840,ffff80003c469790) at sys_pwritev+0x67 syscall(ffff80003c469840) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xeed879d28e0, count: -14 ddb{0}> machine ddbcpu 1