last executing test programs: 378.423514ms ago: executing program 6 (id=7): r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000b80)={0x10, 0x2, 0x0, 0xfffffffe}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8, &(0x7f0000000140)={0x10, 0x2, 0x0, 0x41}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x4, "ff2e77f8ffff00200000004000000001", 0x4}, 0x1c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) 360.305825ms ago: executing program 1 (id=2): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x91, 0xa142}, 0x7, 0x3, 0x0, 0x0, 0x3, 0x9e85, 0xfffffffffffffffe, 0x3}) r1 = socket(0x2, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{{r3}, 0xfffffffffffffffa, 0x33, 0x20000008, 0xc, 0x4}], 0x1, 0x0, 0x5, 0x0) closefrom(r2) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xffff, 0xffff63df, 0x3, 0x2, 0x0, 0x3, 0x41, 0x10, [{0x5, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0xffffffff, 0xfff}, {0x1, 0xfffffffe, 0x2, 0x1}, {0x2, 0x80df, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x803, 0x10002, 0x80cf}, {0x80, 0x4, 0x20000000, 0x2}, {0x7, 0x8, 0xfffffff8, 0xfbffe2eb}, {0x8, 0xffe, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x8, 0x8000100, 0x8, 0x6}, {0x14, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10a, 0x6, 0xd}, {0x200003, 0xee2, 0x2, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x5}, {0xffffffff, 0x8003, 0x6, 0x69}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket(0x10, 0x8000, 0xfe) bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0x9, "00000000000000000000000000000001", 0xc}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0x97, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00b\x00', 0x4}, 0x1c) r5 = syz_open_pts() r6 = setsid() ioctl$TIOCSCTTY(r5, 0x20007461) fcntl$setown(r5, 0x6, r6) kill(r6, 0xa) r7 = socket(0x18, 0x2, 0x0) bind(r7, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000100)="303552b1bb7bf245e0d6d4d52180b983cf4b3615e6e33ff4d9531546142dc8b7d77dd776fc4c705948c724606026c7bf1c2a34ebdc55dd325b92bb475688b6561cbddf8c0b9b0df26be551fbda59b4eaf04b406f3d83c9e988148c270fca9cfd96feb78af36cf34388ed2947dac151741b0bd10317bc98c189314defaf0f09bddea34c83a77991e1286687edcf091e91f6b84dd13f5f4bddc2199ab83b2b039ec9f5887a69455752629d1164", 0xac}, {&(0x7f00000001c0)="0eba368a4713454853bc4a7606b8467e85dab4b1d79a576592cbed78a37c46cf2825d9a586bbc7b9b132a2b352bb91fd8894d0be008ec6a778368023b68c632ab786572e36a5d767ad4928080e2cc2f632775535304b4551920c7e3b59ef30d5ed67c7a4bff229b00b9531", 0x6b}, {&(0x7f0000000240)="0eff098566dc1bdec96e21fac8f546c3330c4319bcf633ac1958cd63ea38ff02a46923058f1f68fc903b9ffa81b9b68d1d3023bbe188b858f4d7b89da93e52dd9fd8a44fc4aa9cfd6ec62bc6beee0593e04972d20f6c5a255e9a62fec6defaf705303034e932d8afd6a7882015c93bc3", 0x70}, {&(0x7f0000000300)="ea9190bc1b24ee4a4032453738a3c20355968a7d16a1194671816d5ac09d64970407b04e8bd3c49f5fbe92b05d74dbbbc2110b5e785d1fe8d5cd7db0e186131ed63c44ed5a1c9f08827ace9800fb6fc1771ef7468093092c8ceef38532c122f67f2a36462b8582819182a6902e57befec46a256074e284ec55e7f5b3ba022a2fe86c93f607f28c6ccbb4bb901a99992240b5e615db94566b232ce0ee998d4af80081f7222a4a7ccd1cc95fc531669ea36d0c31f52176df014a3901b7f2658d5051d4fd3eab4c490c929f318c0947c961590e9243344b3ab78f717e5fd29722a8ef86d9907f3d62a07fdb0503325c9721f0a98568a696b7e22a", 0xf9}, {&(0x7f0000000440)="21bec44c5a68d50e2e8d09021bdb5d1fc4798d2ab7ca1e9c5729165930922e2090ed8db34f9506c801df8aa15bfea87d245c9afb95bb92a3ba7e174c8d8906", 0x3f}, {&(0x7f0000000480)="e9f6c69415221a101fa81a23bd2dc0ea44f1c123c0ec66ecfec86f09689ea11e8d6579c5f037a5cb70cb4526a62fb0365febec08a5a08c83d7e41ea2e6f32a996678344fb139a6bd364037ccedaef9398704e499432d4d6d84575a445838d6eac2bffbe53ba1dd9546880dd77e9b7f9716dec9bf8185e9d1c2b24e3f7fec295c1e25fb9b42d7cd8823282953472e7ae99705a687044984fdde558bcef920bcdf343029fdcd856de457d0e96ef7ee", 0xae}], 0x6) mkdir(&(0x7f0000000400)='./file0\x00', 0x1ca) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x16}, 0x4, &(0x7f0000000540)="9b0209c3eb987ab7fe4189c99e805e6e84d356960798a692992117d6728436ba1bd87f42e3303eac3846520d050712f838130efce33f524b3fa75085f35dfa4dc7e149d4d6d06a3f23616e774c02f1a07bee7385e6664282cb6988f8d9cae75e39a5a11e32e0e6ebd635450b2eba540af7f2aa5dbfbdd900a0da9e274f50acd76b5c567049ef436dbea0d7562f52950fa5ef6ec2bd02adc7f1fe850c081d95dcf4f06a852ab475cca257352828a76e5334be562995e894238b96ca5d4d3f670feac9b4e8aa9bef19525cb6f7e8570b2a374f1408341ed45bb7ad3fb975ffc080e963cb9a8bd949ee0fc6dbceb7d956e658a5673cc947b3e88aa810f8ed7cca1021020000000000001345daa49507756f49775275ca390b94e85d5a95b8bdacb9429c25483a9275d0da3b561c6adc3c141f1b7e1cf2785198a318bdbdc9ac0a623855e941dc1872fcb045e0d9df1ecc6357ee21e2b0802cb60eec6a34396ce1e34e8a0bdd5e94723235f0675fad5315e7eecc3e11347f40e67a8c0ae4428f0760c70e1dd7873e27142bbae1a7e44de453a073c799353d46dd81439b115afb2e353e3bb073e3342773216b07e49ca4df0fd2dbe9a8eb3770ea880f76e6f4588ffb7d82693a096344671843a1f2082612b09a507c6e505ff594828b388f9ed85f1602a20561aed73c87e1ef080f7d9d6a8a38d4a3151c41741dd196f4f7859e071fc98111cc9024f790ce68e3f54baaee16", &(0x7f0000000800)=0x210, 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 359.937481ms ago: executing program 2 (id=3): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = getpgid(0x0) fcntl$setown(r1, 0x6, r2) fcntl$setown(r1, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b38303000000817a0000f5ffffff6989dbdf", 0x2c) (async) syz_emit_ethernet(0xcc, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0]) 235.402526ms ago: executing program 5 (id=6): r0 = socket$inet(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002380)={{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/73, 0x49}, {&(0x7f00000010c0)=""/154, 0x9a}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/152, 0x98}], 0x100000000000022d, &(0x7f00000022c0)=""/180, 0xb4}}, 0x38, 0x2800, &(0x7f00000023c0)={0x6, 0x101}) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @empty, {[@ssrr={0x89, 0x3, 0xd2}]}}, @icmp=@echo={0x8, 0x0, 0x0, 0x1}}}}}) sysctl$kern(&(0x7f0000000000)={0x1, 0xc}, 0x2, &(0x7f0000002400)="c22c5ddc0d02083f18690ea92d45c7b6ac95c1d7b00a91d905d0507827688392ed40161fff971c4cc737d3591d14591de1b59605252b8cc77451754c6d67f87e23de6e5176d1c29fb4b29f413a9286469e3fbd47d9d45caed9ed4fc5c9b2f23fe9b1fea544073e408da82651332445bc853ab9205fe7d58ca073606098712187cd0f3eed5e19", &(0x7f00000024c0)=0x86, &(0x7f0000002500)="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", 0x1000) setsockopt(r0, 0x6, 0x400004, 0x0, 0x0) 60.174474ms ago: executing program 5 (id=9): r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2, 0x1, 0x282}, 0x10) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x102) r2 = syz_open_pts() ioctl$TIOCSBRK(r2, 0x2000747b) truncate(&(0x7f0000000000)='./file0\x00', 0x30000) getdents(r1, &(0x7f0000000100)=""/58, 0x3a) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x22, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x2fffe) unveil(&(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000003c0)={0x0, 0x0, {[0xfffffbfffffffffe, 0x0, 0x8, 0x100200000, 0x3, 0x7, 0xdf61, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x6, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fd, 0x0, 0x0, 0x9], [0x100000001, 0x8000, 0x3ffffffe, 0x6, 0x8001, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x2, 0x1, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0xfffffffa, 0x7d02}, {0x1, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x0, 0x5, 0xffffffffffffffff}, {0x0, 0x5, 0x7f, 0x8}, {0xfffd, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x81, 0x1, 0x3}, {0xfbfe, 0x4, 0x6d9, 0x3}}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) setsockopt$inet_opts(r3, 0x0, 0x1, 0x0, 0x0) r4 = kqueue() kevent(r4, &(0x7f00000003c0)=[{{r4}, 0xfffffffffffffff6, 0x11, 0x40, 0x808, 0x80}, {{r4}, 0xfffffffffffffff6, 0x60, 0x40000000, 0x40000000e, 0xfffffffffffffffb}], 0x8a8a, 0x0, 0xbfffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000080)={0x5, 0x1f1, 0xfffffffe, 0x2, "ffc184bf08d7d753c6afffff00", 0x44, 0x400000e}) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() ioctl$TIOCGTSTAMP(r2, 0x4010745b, &(0x7f0000000080)) ioctl$TIOCNXCL(r2, 0x2000740e) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x2, 0x1}, 0x10) 59.732342ms ago: executing program 3 (id=4): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCSETSTATUSIF(r0, 0xc0284414, &(0x7f0000000080)={'./file0\x00', &(0x7f0000000040)=""/26, 0x1, 0x6, 0x10, 0xffffffff}) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x1f, &(0x7f0000000080)='?\x00\x00\x00', 0x4) r2 = open$dir(&(0x7f0000000440)='.\x00', 0x0, 0xc4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getdents(r2, &(0x7f00000009c0)=""/4096, 0x1000) getdents(r2, &(0x7f00000019c0)=""/4096, 0x1000) 58.608102ms ago: executing program 4 (id=5): r0 = msgget$private(0x0, 0x80) msgsnd(r0, &(0x7f0000002f00)=ANY=[@ANYBLOB="01"], 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x190, 0x43}, 0x6205, 0x2a3, 0x4, 0x544, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000000000000000}) msgrcv(r0, &(0x7f0000000140)={0x0, ""/160}, 0xa8, 0x1, 0x0) msgget$private(0x0, 0x80) (async) msgsnd(r0, &(0x7f0000002f00)=ANY=[@ANYBLOB="01"], 0x0, 0x0) (async) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x190, 0x43}, 0x6205, 0x2a3, 0x4, 0x544, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000000000000000}) (async) msgrcv(r0, &(0x7f0000000140)={0x0, ""/160}, 0xa8, 0x1, 0x0) (async) 57.827927ms ago: executing program 5 (id=10): sysctl$kern(0x0, 0x0, &(0x7f0000000380)="71f91e3471ac0058bc5a73501d94a34b8e5f84cf71b59cc31e324be904b7275e4cf4148bcc806b718430658eacbb1bc976869205deda524647b4cbe9ff34aef0e93d8a64843bc1dc5a1780ab51010087d6ab54e17b18234ac79b56bda330f3d6afb6c3da046674847184802de2da7c060ff6aa4beca4f470366c61c238b751044dcb7168ccd5e4f161f2cbecfb483d02ad3146ac32219b702db48a42eabf5fe1de1cd697b6c5e728df5454066c20560e92881c73169e8dc471a67c1326b484535aa88f0b03a19c78967c4a2126756c51d60aad7fb8592816b1f13984ce5f5c5e", 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x9, "00080000000000000000000000000001", 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "0000000000000000000000700100", 0xffffffc0}, 0x1c) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r1 = syz_open_pts() close(r1) mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000003c0)={0x0, 0x9, 0x0}) r3 = socket(0x2, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0x9, "00000000000000000000000000000001", 0xc}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0x97, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00b\x00', 0x4}, 0x1c) r5 = socket(0x18, 0x2, 0x0) bind(r5, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c) getsockopt$inet_opts(r3, 0x0, 0x1, 0x0, 0x0) r6 = socket(0x18, 0x2, 0x0) r7 = syz_open_pts() r8 = syz_open_pts() r9 = fcntl$dupfd(r7, 0x0, r8) getdents(r9, 0x0, 0x0) ioctl$VNDIOCSET(r9, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', 0x3, &(0x7f0000000180)='./file0/file0\x00', 0xe}) sendmsg$unix(r6, &(0x7f0000000580)={&(0x7f0000000080)=@file={0x0, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000500)=[@rights={0x14, 0xffff, 0x1, [0xffffffffffffffff, r8]}], 0x14, 0x1}, 0xa) syz_open_pts() writev(r1, &(0x7f0000001240)=[{&(0x7f0000000240)="2cda63d7c4d67427b10249ee452b5ad4a0f1aa5b9c4c63b4a680e9410a9a62db32d2a7b2cfb242e2627099db9cbcb28a633cd4c8e53dd343a2abf2a4eed84cba14104af263f484c34f917090c3b131ff", 0xfffe}], 0x1) 57.265139ms ago: executing program 2 (id=11): r0 = socket(0x18, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, "00000000000000000000000000000001", 0xc}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0xfffffffe, "000000000000000000001000", 0x8}, 0x1c) closefrom(r0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="21eadf7c9ccdffffffffffff86dd69529c37003800960000000000000000000000787cf82400ff02000000000000000000000000000170000000010090"]) 21.578989ms ago: executing program 3 (id=12): shmctl$IPC_SET(0x0, 0x1, 0x0) r0 = msgget$private(0x0, 0x7d8) msgrcv(r0, 0xffffffffffffffff, 0x0, 0x0, 0x1000) sysctl$hw(&(0x7f0000000000)={0x6, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200050000000000"], 0x8, 0x0) getresuid(0x0, &(0x7f0000000300)=0x0, 0x0) seteuid(r1) r2 = getgid() r3 = getuid() setresuid(r3, r3, r1) r4 = getpgid(0x0) r5 = getpgrp() msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{r1, r2, r3, 0xffffffffffffffff, 0x4, 0x4}, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x6, r4, r5, 0x1a0000000, 0x0, 0x3, 0x0, 0x10000}) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0}, 0xc) getpgid(r6) 13.667267ms ago: executing program 4 (id=13): r0 = socket(0x18, 0x2, 0x0) (async) clock_gettime(0x4, &(0x7f0000000000)) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db090000280000fed38d5ba80b9e61470c535a98000000ff0200000000000000000000000000012c"]) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ff3177f8ffff00200000004000000001", 0x7}, 0x1c) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) (rerun: 64) ioctl$VNDIOCSET(r1, 0xc0387200, &(0x7f00000003c0)={0x0, 0x9, 0x0}) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000800082b00fe8000000000000000000000000000bbfe"]) (rerun: 32) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) 11.239745ms ago: executing program 6 (id=14): syz_emit_ethernet(0x96, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaa8aaaaaaaaaaaaaabb86dd684498fb00013c0b33a8020fc8d90200000000000000000000000000012b0500000000000005020007000000a41f39fec785be51dc84e28f56b5df54432be6fc920ba1cddac8b5b3dea2f246770200907800000004634d2c0301ff570500000000000000000000000000000000184d07005935c5149b48dcb8a03534e1"]) r0 = socket(0x18, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0xf, '\x00', 0x2009}, 0x1c) setsid() r1 = syz_open_pts() ioctl$TIOCSCTTY(r1, 0x20007461) r2 = fcntl$getown(r1, 0x5) r3 = socket(0x2, 0x2, 0x0) setsid() fcntl$setown(r3, 0x6, r2) getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000100)=0x8) sendmsg$unix(r0, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000038c0)=[@cred={0x18}], 0x18, 0x400}, 0x408) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040), &(0x7f0000000080)=0x10) sysctl$net_inet_ip(&(0x7f00000010c0)={0x4, 0x2, 0x0, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x5a) 0s ago: executing program 5 (id=15): syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db8344007f11000000000000a22b5ccc2c82e10cfa7b29146a351d810000000000000000000000ff02000000006c004e204e20000890781e258000"/89]) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0xe, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x0, 0x7, 0xffffffffffffffff, 0x9, 0x91c, 0xa, 0x100180, 0xffff, 0xb8, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x3, 0x1005, 0x2, 0x6f1a683a, 0x1, 0x8, 0x7, 0x1, 0x3], [0x6, 0x9, 0x10000, 0x800000000a, 0x10000, 0x8, 0x100000000002], [0x100000000, 0x10801, 0x0, 0x10000000000005, 0x3, 0x8], [{0x5ad, 0x7, 0x5, 0x6}, {0x2, 0x924, 0x8002}, {0x1000, 0x5, 0xfffffff2, 0x5}, {0x6, 0x8, 0x1003, 0x8000}, {0x4, 0x3, 0x2, 0x10000}, {0xeff8, 0x4, 0x5}, {0x5f, 0xffffff7e, 0x1ff, 0x9}, {0x3, 0x10000, 0xfffffffd, 0x4}], {0x52f, 0x4, 0xfffffffc, 0x8}, {0xfffb, 0x3, 0x40000048, 0xfffffffffffffffe}}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$DIOCGETQUEUES(r0, 0xc148445e, &(0x7f0000000300)={0xd05, 0x1, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x1, 0xcaf}, {0x3, 0x9}, 0x2}, {{0x3, 0x7}, {0x0, 0x7fff}, 0xffff}, {{0x4, 0xb8}, {0x3, 0x3}, 0x5}, {0x8, 0x80000000, 0xfffffffa, 0x800}, 0x0, 0xffffffab, 0x8, 0x8, 0x4}}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x14, 0x0, 0x37) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) (async, rerun: 64) dup2(r1, r2) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x20, 0x1c, 0x1062, 0x0, 0xf, 0x11, 0x0, @empty, @local={0xac, 0x14, 0x0}}, @udp={{0x1, 0x2, 0x8}}}}}}) (async, rerun: 32) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (rerun: 32) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbfffffffffe, 0x0, 0x8, 0x100200000, 0x3, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x6, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x100000001, 0x8000, 0x3ffffffe, 0x6, 0x8001, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x2, 0x1, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0xfffffffa, 0x7d02}, {0x1, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x0, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0xfffd, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x81, 0x1, 0x3}, {0xfbfe, 0x4, 0x6d9, 0x3}}}) (async) r3 = kqueue() (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0x4, "ff4100e88400000002ec800201001500"}, 0x1c) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809fffffffffffeff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) r4 = socket(0x2, 0x8002, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) closefrom(r5) (async, rerun: 32) read$audio(r2, &(0x7f0000000180)=""/153, 0x99) (async, rerun: 32) sysctl$net_inet_ip(&(0x7f00000001c0)={0x4, 0x2, 0x0, 0x29}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. uvm_fault(0xffffef007efcdba0, 0x9fc00, 0, 1) -> e kernel: page fault trap, code=0 Stopped at uvm_fault_upper_lookup+0x18b: movq 0(%r14),%rax TID PID UID PRFLAGS PFLAGS CPU COMMAND * 54639 52312 0 0x40 0 1 syz-executor 12602 55835 32767 0x10 0 0 syz-executor uvm_fault_upper_lookup(ffff80003c42bc50,ffff80003c42bc88,ffff80003c42bb50,ffff80003c42bbd0) at uvm_fault_upper_lookup+0x18b uvm_fault(ffffef007efcdba0,d6c44f33000,0,1) at uvm_fault+0x159 upageflttrap(ffff80003c42bdf0,d6c44f33918) at upageflttrap+0xa9 usertrap(ffff80003c42bdf0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7b6a249adee0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xffffef007efcdba0, 0x9fc00, 0, 1) -> e ddb{1}> show kasan No such command ddb{1}> trace uvm_fault_upper_lookup(ffff80003c42bc50,ffff80003c42bc88,ffff80003c42bb50,ffff80003c42bbd0) at uvm_fault_upper_lookup+0x18b uvm_fault(ffffef007efcdba0,d6c44f33000,0,1) at uvm_fault+0x159 upageflttrap(ffff80003c42bdf0,d6c44f33918) at upageflttrap+0xa9 usertrap(ffff80003c42bdf0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7b6a249adee0, count: -5 ddb{1}> show registers rdi 0 rsi 0x3 rbp 0xffff80003c42bb40 rbx 0 rdx 0 rcx 0xffff80003bbdd250 rax 0xffff80003c42bb50 r8 0xffffffff81ecdfe0 uvm_map_inentry_sp r9 0 r10 0xd409377e6230058 r11 0xc225e482ad34e723 r12 0xffff80003c42bc88 r13 0xd6c44f30000 r14 0x9fc00 acpi_pdirpa+0x8ba71 r15 0x3 rip 0xffffffff82b6db2b uvm_fault_upper_lookup+0x18b cs 0x8 rflags 0x10293 __ALIGN_SIZE+0xf293 rsp 0xffff80003c42bab0 ss 0 uvm_fault_upper_lookup+0x18b: movq 0(%r14),%rax ddb{1}> show proc PROC (syz-executor) tid=54639 pid=52312 tcnt=1 stat=onproc flags process=40 proc=0 runpri=51, usrpri=51, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003bbdcd20,0xffffffff839e66e8 process=0xffff80003afc1360 user=0xffff80003c426000, vmspace=0xffffef007efcdba0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND *52312 54639 41976 0 7 0x40 0 syz-executor 63947 90080 76048 32767 2 0x10 0 syz-executor 63947 216344 76048 32767 3 0x10 0x4000080 fsleep syz-executor 63947 75006 76048 32767 3 0x10 0x4000080 fsleep syz-executor 63947 121143 76048 32767 3 0x10 0x4000080 fsleep syz-executor 55835 12602 6997 32767 7 0x10 0 syz-executor 55835 189619 6997 32767 2 0x10 0x4000080 syz-executor 23376 312949 42421 32767 2 0x10 0 syz-executor 23376 429405 42421 32767 3 0x10 0x4000080 fsleep syz-executor 23376 290720 42421 32767 2 0x10 0x4000000 syz-executor 79171 427879 37232 32767 2 0x10 0 syz-executor 79171 90147 37232 32767 3 0x10 0x4000080 fsleep syz-executor 43537 128561 17864 32767 2 0x10 0 syz-executor 43537 64216 17864 32767 3 0x10 0x4000080 fsleep syz-executor 38222 343150 29981 0 2 0x100002 0 ndp 29981 146166 52749 0 3 0x100002 0x88 sigsusp sh 10390 392281 49748 32767 2 0x10 0 syz-executor 10390 388401 49748 32767 3 0x10 0x4000080 fsleep syz-executor 10390 463238 49748 32767 3 0x10 0x4000080 fsleep syz-executor 41976 235502 11488 0 3 0x80 0 ppwait syz-executor 6997 327256 70888 32767 3 0x10 0x80 nanoslp syz-executor 76048 251272 44522 32767 3 0x10 0x80 nanoslp syz-executor 42421 340663 35911 32767 3 0x10 0x80 nanoslp syz-executor 37232 313540 8679 32767 3 0x10 0x80 nanoslp syz-executor 17864 296598 63815 32767 3 0x10 0x80 nanoslp syz-executor 52749 25442 95737 0 3 0 0x80 wait syz-executor 49748 471942 82607 32767 3 0x10 0x80 nanoslp syz-executor 11488 32990 96480 0 3 0x2 0x80 wait syz-executor 70888 437010 96480 0 3 0x2 0x80 wait syz-executor 44522 503396 96480 0 3 0x2 0x80 wait syz-executor 35911 267532 96480 0 3 0x2 0x80 wait syz-executor 8679 408432 96480 0 3 0x2 0x80 wait syz-executor 63815 98148 96480 0 3 0x2 0x80 wait syz-executor 82607 269355 96480 0 3 0x2 0x80 wait syz-executor 95737 136918 96480 0 3 0x2 0x80 wait syz-executor 96480 432290 59329 0 3 0x2 0x80 kqread syz-executor 59329 519488 88476 0 3 0x100002 0x88 sigsusp ksh 88476 263847 21294 0 3 0x10 0x88 kqread sshd-session 21294 213057 36631 0 3 0x12 0x80 kqread sshd-session 88500 127301 1 0 3 0x100003 0x80 ttyin getty 36631 45458 1 0 3 0 0x88 kqread sshd 22504 403936 82466 73 3 0x1100010 0x80 kqread syslogd 82466 427620 1 0 3 0x100002 0x80 sbwait syslogd 49135 226299 1 0 3 0x100000 0x80 kqread resolvd 94755 240835 55194 77 3 0x100012 0x80 kqread dhcpleased 48909 172574 55194 77 3 0x100012 0x80 kqread dhcpleased 55194 400723 1 0 3 0 0x80 kqread dhcpleased 59683 470169 0 0 3 0x14000 0x200 bored smr 25214 171853 0 0 2 0x14000 0x200 zerothread 57782 355543 0 0 3 0x14000 0x200 aiodoned aiodoned 90615 306678 0 0 3 0x14000 0x200 syncer update 77905 56258 0 0 3 0x14000 0x200 cleaner cleaner 45776 185144 0 0 3 0x14000 0x200 reaper reaper 68643 116414 0 0 3 0x14000 0x200 pgdaemon pagedaemon 82631 496002 0 0 3 0x14000 0x200 bored viomb 55151 375441 0 0 3 0x14000 0x40000200 acpi0 acpi0 52877 224324 0 0 3 0x14000 0x40000200 idle1 4162 407919 0 0 3 0x14000 0x200 bored softnet1 70339 356961 0 0 3 0x14000 0x200 bored softnet0 18897 463807 0 0 3 0x14000 0x200 smrbar systqmp 54441 403721 0 0 3 0x14000 0x200 bored systq 51236 412267 0 0 3 0x14000 0x200 tmoslp softclockmp 7150 267964 0 0 3 0x14000 0x40000200 tmoslp softclock 7553 8239 0 0 3 0x14000 0x40000200 idle0 1 499312 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 52312 (syz-executor) thread 0xffff80003bbdd250 (54639) shared rwlock amaplk r = 0 (0xffffef006d4a67d0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_check+0x8a9 #3 uvm_fault+0x106 #4 upageflttrap+0xa9 #5 usertrap+0x430 #6 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xffffef007efcdca0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 Process 63947 (syz-executor) thread 0xffff80003bbdc2c0 (216344) exclusive rwlock kobjlk r = 0 (0xffffffff83a33748) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_unmap_kill_entry_withlock+0x140 #3 uvm_unmap_remove+0x6c2 #4 uvm_unmap+0xa7 #5 km_free+0x85 #6 pipe_destroy+0x265 #7 pipe_close+0x43 #8 fdrop+0x121 #9 dopipe+0x480 #10 syscall+0xbd4 #11 Xsyscall+0x128 exclusive rwlock kmmaplk r = 0 (0xffffffff83b00a00) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvm_unmap+0x7d #4 km_free+0x85 #5 pipe_destroy+0x265 #6 pipe_close+0x43 #7 fdrop+0x121 #8 dopipe+0x480 #9 syscall+0xbd4 #10 Xsyscall+0x128 exclusive rwlock pipelk r = 0 (0xffffef006d460138) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 pipe_destroy+0x3b #3 pipe_close+0x43 #4 fdrop+0x121 #5 dopipe+0x480 #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 18897 (systqmp) thread 0xffff800045ffea60 (463807) shared rwlock systqmp r = 0 (0xffffffff838e42b8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11047 12018K 12034K 166960K 12138 0 pcb 17 12K 12K 166960K 17 0 rtable 233 6K 6K 166960K 343 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 2K 166960K 29 0 iov 0 0K 12K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1287 81K 81K 166960K 1352 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 27 101K 129K 166960K 150 0 sigio 0 0K 0K 166960K 1 0 proc 58 99K 163K 166960K 496 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 1K 166960K 366 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 249 161K 169K 166960K 2925 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 49 98K 114K 166960K 1255 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 2 0 NDP 27 2K 2K 166960K 27 0 temp 37 9114K 9120K 166960K 3801 0 kqueue 13 20K 22K 166960K 27 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 36 0 32 1 0 1 1 0 8 0 rtentry 176 109 0 1 5 0 5 5 0 8 0 unpcb 144 37 0 22 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 12 0 8 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 73 0 64 2 0 2 2 0 8 1 nd6 152 22 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 450 0 0 29 0 29 29 0 8 0 art_table 40 451 0 0 5 0 5 5 0 8 0 art_node 32 109 0 10 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 2 1 0 1 1 0 8 1 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1563 0 104 92 0 92 92 0 8 0 ffsino 296 1563 0 104 113 0 113 113 0 8 0 nchpl 144 1762 0 74 63 0 63 63 0 8 0 vnodes 216 1644 0 0 92 0 92 92 0 8 0 namei 1024 5258 0 5258 2 0 2 2 0 8 2 percpumem 16 51 0 0 1 0 1 1 0 8 0 kstatmem 264 25 0 0 2 0 2 2 0 8 0 scxspl 216 6212 0 6212 3 2 1 3 1 8 1 plimitpl 152 37 0 13 1 0 1 1 0 8 0 sigapl 424 451 0 396 7 0 7 7 0 8 0 knotepl 120 274 0 0 9 0 9 9 0 8 0 kqueuepl 224 24 0 15 1 0 1 1 0 8 0 pipepl 344 189 0 161 3 0 3 3 0 8 0 fdescpl 528 435 0 396 4 0 4 4 0 8 0 filepl 160 1596 0 1386 10 0 10 10 0 8 1 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 24 0 7 1 0 1 1 0 8 0 pgrppl 48 32 0 7 1 0 1 1 0 8 0 ucredpl 104 107 0 90 1 0 1 1 0 8 0 zombiepl 144 396 0 396 1 0 1 1 0 8 1 processpl 1232 451 0 396 5 0 5 5 0 8 0 procpl 664 473 0 408 6 0 6 6 0 8 0 sockpl 752 146 0 118 4 0 4 4 0 8 1 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 120 0 0 15 0 15 15 0 8 0 mcl2k 2048 9 0 0 2 0 2 2 0 8 0 mextrefs 64 12 0 0 1 0 1 1 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 159 0 0 10 0 10 10 0 8 0 bufpl 272 2290 0 102 146 0 146 146 0 8 0 anonpl 32 5374 0 0 44 0 44 44 0 247 0 amapchunkpl 152 7974 0 7447 26 0 26 26 0 158 3 amappl16 200 1130 0 1113 4 0 4 4 0 8 3 amappl15 192 3 0 3 1 0 1 1 0 8 1 amappl14 184 411 0 409 1 0 1 1 0 8 0 amappl13 176 117 0 106 1 0 1 1 0 8 0 amappl12 168 674 0 639 2 0 2 2 0 8 0 amappl11 160 4 0 4 1 0 1 1 0 8 1 amappl10 152 81 0 71 1 0 1 1 0 8 0 amappl9 144 270 0 270 1 0 1 1 0 8 1 amappl8 136 95 0 94 1 0 1 1 0 8 0 amappl7 128 137 0 125 1 0 1 1 0 8 0 amappl6 120 145 0 143 1 0 1 1 0 8 0 amappl5 112 92 0 85 1 0 1 1 0 8 0 amappl4 104 282 0 267 1 0 1 1 0 8 0 amappl3 96 1445 0 1320 5 1 4 4 0 8 0 amappl2 88 518 0 466 2 0 2 2 0 8 0 amappl1 80 10257 0 9644 14 0 14 14 0 8 0 amappl 88 2241 0 2061 5 0 5 5 0 92 0 uvmvnodes 80 95 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 435 0 396 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 435 0 396 1 0 1 1 0 8 0 vmmpekpl 168 5587 0 5556 2 0 2 2 0 8 0 vmmpepl 168 36539 0 34434 93 0 93 93 0 357 0 vmsppl 488 434 0 396 7 1 6 6 0 8 0 rwobjpl 80 13525 0 12547 23 0 23 23 0 8 1 pdppl 4096 877 0 792 113 14 99 99 0 8 14 pvpl 32 11764 0 0 96 0 96 96 0 265 1 pmappl 256 434 0 396 4 1 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 424 0 17 12 0 12 12 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83925ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x7c3097164090, count: 12 ddb{0}> trace x86_ipi_db(ffffffff83925ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x7c3097164090, count: -3 ddb{0}> machine ddbcpu 1 Stopped at uvm_fault_upper_lookup+0x18b: movq 0(%r14),%rax uvm_fault_upper_lookup(ffff80003c42bc50,ffff80003c42bc88,ffff80003c42bb50,ffff80003c42bbd0) at uvm_fault_upper_lookup+0x18b uvm_fault(ffffef007efcdba0,d6c44f33000,0,1) at uvm_fault+0x159 upageflttrap(ffff80003c42bdf0,d6c44f33918) at upageflttrap+0xa9 usertrap(ffff80003c42bdf0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7b6a249adee0, count: 10 ddb{1}> trace uvm_fault_upper_lookup(ffff80003c42bc50,ffff80003c42bc88,ffff80003c42bb50,ffff80003c42bbd0) at uvm_fault_upper_lookup+0x18b uvm_fault(ffffef007efcdba0,d6c44f33000,0,1) at uvm_fault+0x159 upageflttrap(ffff80003c42bdf0,d6c44f33918) at upageflttrap+0xa9 usertrap(ffff80003c42bdf0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7b6a249adee0, count: -5