last executing test programs: 1.621663902s ago: executing program 0 (id=1): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) r0 = open(&(0x7f0000000040)='./bus\x00', 0x200, 0xaf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000001540)={0x1, &(0x7f0000000180)=[0x0]}) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x80c) socket(0x18, 0x3, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d37258647597) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) select(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x100000000000000, 0x1000006, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x60, 0xfffffffffffffffe, 0x0, 0x0, 0x9, 0x9, 0x1ff, 0xffc}, 0x0) ioctl$WSDISPLAYIO_LDFONT(r0, 0x20004101, 0x0) 1.593818007s ago: executing program 1 (id=2): chmod(&(0x7f0000000040)='.\x00', 0x35e) mkdir(&(0x7f0000000080)='./file0\x00', 0x1b3) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0xbfffffff, 0x400, 0x40, 0xffffd6c6, "e48294068d5bfac68f398406df04df009900", 0x543, 0x8}) readv(r0, &(0x7f0000001700)=[{&(0x7f00000000c0)=""/154, 0x9a}], 0x1) syz_open_pts() syz_open_pts() openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x1ffffffffffffe24, &(0x7f0000000000)=[{0xcf, 0xa3, 0x6, 0x101}, {0xfff, 0xf7, 0x9, 0x8}]}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x1c) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)) r5 = kqueue() getitimer(0x300, 0x0) kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000000140)="53183374", 0xffffffba) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r6, 0x84946466, &(0x7f0000000400)={'tap', 0x0}) lchown(&(0x7f0000000100)='./file0\x00', r4, r3) syz_open_pts() 1.591153998s ago: executing program 3 (id=4): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0xc, 0x2a3, 0x0, 0x0, 0x40000005, 0x800000000000013, 0x8000000200, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x13, 0x0, 0x37) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = semget(0x0, 0x1, 0x281) setuid(0xffffffffffffffff) semop(r0, &(0x7f00000000c0)=[{0x0, 0x8, 0x1800}], 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x1, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x800009}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x3, 0xfffffffd}, {0x0, 0x4}, {0x0, 0x7fffffff}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x2000000}, {0x0, 0x4000003}, {0x1}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x6}, {}, {0x3}, {0x2, 0x3}, {0x3}, {0x1, 0x9}, {}, {}, {0x1, 0x57fd}]}) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="392add76b950ff90f48172e98e56de47", 0x10}], 0x1) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x6, 0x2cdd, 0x5, 0x7, "18270c8265b7c11aeebdf7e73f1d4501376d91fb", 0xf3, 0x309e}) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x5f0d) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) closefrom(r4) 1.454460665s ago: executing program 7 (id=8): mmap(&(0x7f00000db000/0x3000)=nil, 0x3000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x40000801) setsid() r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0xc2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSCTTY(r0, 0x20007461) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x40047477, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) mlock(&(0x7f0000017000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 1.45097675s ago: executing program 2 (id=3): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000280), 0x80a1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[0x0]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0x801c4903, &(0x7f0000000140)={0x4, '.\x00'}) select(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r2 = socket$inet(0x2, 0x1, 0x0) lstat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r2, 0x7fff) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x2c, 0x67, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8200, 0x0, 0xfffc, {[@window={0x3, 0x3}]}}}}}}}) 1.391698961s ago: executing program 6 (id=7): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) sysctl$net_inet_divert(&(0x7f0000000340)={0x4, 0x2, 0x102, 0x3}, 0x4, &(0x7f0000000380)="74a194fae713d97678349692876b824dcd7ab7cfd391ada2726fc89b0fd5549d30d22de88c5a8a4ef68a0ee6d176fc6dce9d95aa7405f1e3914e06bb92549ae85a8c205122aa412dba30b069e395ba4d0dcf0da57aaf68867b52c50f422d9b9f48ae3295308b453bb7286aada1920fb6ec45ec6f4c8763e338cfbce8c785dd9eb60cb694280a58699f4a09545c72f6d46111f84a7a79e956bc7a348b57c83551643aa7e13e2f507fa1b5bd5237be6310c93d", &(0x7f0000000440)=0xb2, &(0x7f0000000480)="a8e30ee8", 0x4) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f00000000c0)={""/16, @ifru_flags}) sysctl$ddb(&(0x7f00000030c0)={0x9, 0x5}, 0x2, &(0x7f0000003100), 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$PCIOCGETROM(r1, 0xc0107005, &(0x7f0000000300)={{0x7, 0x40, 0x81}, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x24) ioctl$DIOCGETSTATE(r2, 0xc1084413, &(0x7f0000000140)={{0xe6, './file0\x00', [{[@v4=@local={0xac, 0x14, 0x0}, @v4=@remote={0xac, 0x14, 0x0}], [0x8, 0x3ff], 0x800, 0x2}, {[@v4=@rand_addr=0x7, @v6=@mcast1], [0x0, 0x2], 0x9, 0x1a}], {{0x4, 0x2, 0x4, 0x6}, 0x80000000, 0x4, 0x5, 0x8, 0x5, 0x40, 0x4}, {{0x4, 0x5b, 0x7, 0x3}, 0x1, 0x200, 0x2, 0x0, 0x80, 0x81, 0xd}, @v4=@multicast1, 0x6, 0x7, 0x7fffffff, 0x9, 0x6, [[0xf1, 0x9fb], [0x3, 0x338f7d59]], [[0x1, 0x9], [0x45d, 0xc]], 0x6, [0x7, 0xd6f], 0x7fff, 0xc, 0x6, 0x1, 0x4, 0x2, 0xc, 0x6, 0x4, 0xfc, 0x2, 0x7, '+\t'}}) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) 1.344774203s ago: executing program 7 (id=9): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x80) flock(r0, 0xc) r1 = socket(0x2, 0x2, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000380), 0x10, 0x0) openat$vnd(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x4}, 0x40a) sendto$unix(r3, 0x0, 0x0, 0xa, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getitimer(0x0, 0xfffffffffffffffe) syz_open_pts() closefrom(r1) select(0x40, &(0x7f0000000080)={0x9, 0x0, 0x7fffffff, 0x564, 0xc11, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$WSMUXIO_INJECTEVENT(r4, 0x80185760, &(0x7f0000000100)={0x2, 0x2, {0x0, 0x7b67}}) pselect(0x40, &(0x7f0000000000)={0x4, 0xfff, 0x400, 0x9, 0x3, 0x3, 0x6, 0xfffffffffffffffb}, &(0x7f0000000040)={0x1, 0xbe, 0x2, 0x3, 0x100, 0x15, 0x4, 0x9}, 0x0, 0x0, 0x0) 1.344131087s ago: executing program 4 (id=5): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xff, {0xfffffffffffffffe, 0x1}}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff23de, 0x8000005, 0xffe, 0x8, 0x3, 0x10, 0x10, [{0x6, 0x81, 0xfffff115, 0x80000001}, {0x3, 0x1, 0xa, 0xfff}, {0x4, 0x4baa, 0x6, 0xd}, {0x7, 0xe2, 0x81, 0x100}, {0x8, 0xfffff800, 0x5, 0xffffffff}, {0x7890, 0xfff9, 0x8, 0x4}, {0x3, 0x80000800, 0x3, 0xfffffffa}, {0x204, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0xfff, 0x7fef}, {0x3, 0x1, 0x6, 0x8bfd}, {0x2, 0x1, 0x8, 0x6}, {0xc, 0x4, 0x800010, 0x5}, {0x401, 0x4, 0x40000b, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x8ff9, 0x1, 0x100000, 0x400}]}) syz_emit_ethernet(0xee, &(0x7f0000000780)={@random="e702f2ffef1f", @random="97b0ae1a006b", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0xb8, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "00de00", 0x6, 0x1, 0x8, @rand_addr="26651f52e2840a3a68632730c0fc4357", @mcast1, [@dstopts={0x11}, @routing={0x0, 0x0, 0x0, 0x5}], "cdc7d5f435179c8a3a2c30b63fae67cf8a5370c9ff870a9bff7e06613f148d95c9c8a454451e63dae9ce7126b5130fb4e1c3e21832e515326477ca06a0e8bbabfdf38dfc2e6660e36d9cb7101af879ae96ee100e71deed49ea8a28886533da262df047b4a9b7d02f78abc0501c467a88c312d39b559acac8"}}}}}}}) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='#', 0x1}], 0x1) write(r0, &(0x7f00000001c0)='\n', 0x1) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) sysctl$kern(&(0x7f0000000100)={0x1, 0x4f}, 0x3, &(0x7f0000000140)="71f91e3871ac0058e05a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000200)=0xff55, 0x0, 0xffffff42) r1 = socket(0x18, 0x1, 0x0) sysctl$net_inet_etherip(&(0x7f0000000040)={0x4, 0x2, 0x61, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fdc12eaa4e713048e69931929648", 0x14) 141.812305ms ago: executing program 1 (id=10): mknod(0x0, 0x1000, 0x0) select(0x40, &(0x7f0000000140)={0x9, 0x7, 0x40, 0x7, 0xe, 0x101, 0x2, 0x80000001}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b9", 0x1) (async) write(r2, &(0x7f00000004c0)="b9", 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r1, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x89) (async) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x89) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) socket(0x18, 0x4003, 0x0) (async) r4 = socket(0x18, 0x4003, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) r5 = accept$inet(r4, 0x0, &(0x7f0000000000)) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r6, 0x3}) (async) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r6, 0x3}) kevent(r3, &(0x7f0000000200)=[{{r4}, 0xfffffffffffffffe, 0x71, 0x4, 0x3, 0x3}, {{r4}, 0xfffffffffffffff7, 0x10, 0x20000000, 0x80, 0x4}, {{r4}, 0xfffffffffffffff6, 0x40, 0x10, 0x8, 0x3}, {{r4}, 0xfffffffffffffffb, 0x41, 0x4, 0x6, 0x3}, {{r6}, 0x0, 0x82, 0x80, 0x1, 0x8}], 0x2bffb59c, &(0x7f0000000700)=[{{r4}, 0xfffffffffffffff8, 0x49, 0x2, 0x9428, 0x10000}, {{r5}, 0xfffffffffffffffa, 0x6, 0xf0000000, 0x1000, 0x2}, {{r5}, 0xfffffffffffffffa, 0x80, 0x4, 0xffff, 0x6}, {{r1}, 0xfffffffffffffffa, 0x1, 0xf0000000, 0x158, 0x9}, {{r4}, 0xfffffffffffffff9, 0x49, 0x2, 0x4, 0x8}, {{r6}, 0xfffffffffffffff7, 0x1, 0x2, 0x7, 0x7fff}, {{r5}, 0xfffffffffffffff8, 0x55, 0x1, 0xb6, 0x36}], 0x7, &(0x7f00000003c0)={0x187, 0x7}) r7 = socket$inet(0x18, 0x3, 0x102) sendmsg(r7, &(0x7f0000000240)={&(0x7f00000001c0)=@in={0x10, 0x2, 0x0, 0x10001}, 0x10, &(0x7f0000000200)=[{&(0x7f00000002c0)="638802000000119a8c51f60300a24a85abdd612dd68e59adfecf9323100084410a8591426ee03e8082dca086c0ea071890c64f56b44149838030b8b92b3b84f1a459d4debfc45c4ab28bf6487a3bb2aded619ddccc93df700d2cd547a6", 0x5d}, {&(0x7f0000000040)="28195d0ccf00000000", 0x9}, {&(0x7f0000000540)="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", 0x1b2}], 0x3, 0x0}, 0x1) fcntl$dupfd(r4, 0xa, r5) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setitimer(0x2, 0x0, 0x0) socket(0x18, 0x3, 0x0) (async) socket(0x18, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0xffff, 0x1024, &(0x7f0000000080), &(0x7f0000000580)=0xc) (async) getsockopt$sock_cred(r8, 0xffff, 0x1024, &(0x7f0000000080)={0x0}, &(0x7f0000000580)=0xc) flock(0xffffffffffffffff, 0x0) getpgrp() setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) kill(r9, 0x11) (async) kill(r9, 0x11) 117.971616ms ago: executing program 5 (id=6): sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x4e) open(&(0x7f00000003c0)='./file0\x00', 0x80000000000206, 0x48) r0 = socket$inet6(0x18, 0x3, 0x83) setgid(0xffffffffffffffff) r1 = getgid() setresgid(r1, 0x0, 0xffffffffffffffff) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@un=@abs={0xf7, 0xa8df0415e84282c0, 0x0, 0x0}, 0x8, &(0x7f0000000080)=[{&(0x7f0000000040)="8a532315930867693b8652aff3aae922b6", 0x11}], 0x1, &(0x7f0000000400)=[{0x184, 0x1, 0x8, "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"}, {0x4c, 0xffff, 0xfffffff8, "b6aae09aead97f61159461bcdb4bbc329782a61e1e2aaff7ba322f9325e30c6d9a2781a56e35911530af404a5faf1e7f8d3d53fa0a08e2cba8f97a977041"}, {0xffffffb6, 0x1, 0xffffffff, "ff943d31295e1455586740d67474bdc562d3f8de2193f5a6b121f01c0320db5a44de83cfc6935cc0040fafc6c4dbaa28dcd1652127f182db85d6b17e3fb37d70d873e360675579e1b389254481276173577d0ac5d2e70f9ff609a518884c35790e2809671e0505010000000000000004904ed32083b4c6661653b3927b7c83df699847497f02cc6608124b5578912fab69ae9e"}, {0x1c, 0x1, 0x3, "1e82b3b14b17856a27abf43aa5d0"}], 0x28c}, 0x8) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x3, 0x2, 0x5265, 0x5}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) ktrace(&(0x7f0000000180)='./file0\x00', 0xc68d89118a876c77, 0x51d73188af82c4b7, 0xffffffffffffffff) 79.258878ms ago: executing program 3 (id=11): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000340)) open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000080)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000100)='./file2\x00', &(0x7f0000000000)='./file2/file0/file0\x00') select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x2000000000000, 0x0, 0x0, 0x0, 0x3, 0x7}, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getuid() rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 26.545228ms ago: executing program 2 (id=12): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x65, &(0x7f0000000280)={{0x1c, 0x18, 0x3, 0x1, "2da5ab4118bb11f262f104012ece831c", 0x6}, {0x1c, 0x18, 0x3, 0x4, "2a04f39ccf93665af5f71a7f86067f69", 0xd}, 0x3, [0xb, 0x9820, 0x7, 0xffffffc5, 0x6, 0x2, 0x7, 0x2]}, 0x5c) 0s ago: executing program 0 (id=13): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) closefrom(r0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000300)="01000000", 0x4) setsockopt(r1, 0x0, 0x65, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x0, 0x200000000000001c, 0x1000003fd}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$VT_GETSTATE(r0, 0x40067664, &(0x7f0000000080)) getsockname(r0, 0x0, 0x0) connect(r0, &(0x7f00000000c0)=@in6={0x1c, 0x18, 0x0, 0x0, "6b07f3d5094555305486559cc715eacf", 0x6}, 0x1c) sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000040)="4d71bc77857c284db523d42f6ea8040688fee3fd6a2f4600"/33, 0xffffffb7) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ioctl$TIOCSFLAGS(r3, 0x8004745c, &(0x7f0000000100)=0x8) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000b80)={0x10, 0x3, [{&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x9cd}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7e50}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x8}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x800}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x8433}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x6}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x8000)=nil, 0x7}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x8ad}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2424b352}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xf}], './file0\x00', 0x0, 0x382, 0xb9af, 0x22f5589c, [0xf, 0xd, 0x40, 0x8, 0x3, 0x9, 0xfffffffe, 0xc254, 0x80000001, 0xd37, 0x3, 0x5, 0xa8, 0x40, 0x10, 0x200, 0x4, 0x6, 0xb, 0x10001, 0x7, 0x5687, 0xbc7, 0x6, 0xb, 0x3, 0x4, 0x0, 0x5, 0x0, 0x800, 0x2, 0xbb, 0x1, 0x7, 0x7, 0x10000, 0x1, 0x0, 0x0, 0x6, 0x40, 0x9, 0xffffff81, 0xfffffffc, 0x9, 0x0, 0x2403, 0x80000000, 0x1, 0x5, 0xfffffff8, 0x10, 0x8000, 0x9, 0x4, 0x8, 0x190e, 0x8001, 0x84d, 0x1, 0x5, 0x8, 0x1ff, 0x7ff, 0xfffff000, 0x1ff, 0x0, 0x5, 0x0, 0x1, 0x9, 0xffff8000, 0x80, 0xfffffffe, 0x20000000, 0x29b3, 0x6, 0xfff, 0x9, 0x37, 0x4, 0x2, 0x3916, 0xfffffff3, 0x4, 0x4, 0x2, 0x0, 0x396, 0xf02a, 0x8, 0x48, 0x0, 0xf, 0x6, 0x1, 0x4, 0x0, 0x5, 0x80, 0x8, 0x6, 0x0, 0x8000, 0x2, 0x1, 0x7, 0x1ff, 0x1, 0x7, 0x4, 0xe6f, 0x10001, 0x3ff, 0x3, 0x5, 0x400, 0x6, 0x9, 0x8, 0x10, 0xe7fa, 0x1000, 0x3, 0x6, 0x6d8, 0x5, 0x0, 0x8, 0xc4, 0x7f, 0x95, 0x0, 0x5, 0x9, 0x2fb, 0x3, 0x45f5, 0x59, 0x1000, 0x6, 0x2, 0x2c00, 0x4, 0x4, 0x3, 0x100, 0x8, 0x7, 0xb, 0xfc7f, 0x4, 0x6, 0x5, 0x0, 0x3, 0x80000000, 0x6, 0x7, 0x2, 0x75, 0x77e, 0x2, 0x8, 0x5, 0x10, 0x10, 0x7, 0x5, 0x0, 0x4, 0x4, 0x88, 0x400, 0x9, 0x3, 0x7, 0xfffff3e2, 0x2, 0x5, 0x8, 0x1, 0x1, 0x9, 0x9, 0x2, 0x0, 0x8c, 0x3, 0x1, 0x9128, 0xfffff1e9, 0x9, 0x1ff, 0x3, 0x9, 0x69, 0xcf, 0x1, 0xe, 0x0, 0xf, 0x51, 0x2, 0xffffffcf, 0x100, 0x7, 0x5, 0x5b1, 0xb8dc, 0x800, 0x5, 0x1, 0xfffffc01, 0x7, 0xffffffff, 0x1, 0x6, 0x8, 0x10001, 0x2, 0x6, 0x100, 0x2, 0x2, 0x4, 0x0, 0x2, 0x80, 0x100, 0x7, 0xd2, 0xffff0000, 0x5, 0x0, 0x9, 0x4b203b01, 0xe6, 0x1, 0x0, 0x8, 0x101, 0x23, 0xb485, 0x0, 0x5, 0x4, 0x1, 0x4d4260d5, 0x8000, 0x1, 0x5a, 0x80000001, 0x1, 0x5, 0x0, 0x4, 0x10, 0x89b, 0x4bc3, 0xa, 0x8001, 0x8, 0x4, 0xa2, 0x0, 0x7, 0x6, 0x10d, 0x4, 0x400, 0x2, 0x8, 0xffff, 0x2, 0x6, 0xc8e, 0xb, 0x4, 0x5d5, 0x8, 0x7, 0x6b, 0xea0b, 0x4518, 0x2, 0xb3d1294, 0xa, 0x7fffffff, 0x1, 0x100, 0x8, 0x9, 0x5, 0x16e5, 0x8000, 0x1, 0x4, 0x1, 0xa3, 0x8, 0x8, 0x0, 0xffff, 0x3, 0x9, 0x9, 0x2, 0xf, 0x8, 0x7, 0x4, 0x3, 0x8, 0x63f, 0x7, 0x5, 0x7ff, 0x1, 0x9, 0xeb, 0x3ff, 0x2, 0x7, 0x2, 0x5, 0x5, 0x93, 0x0, 0xc3, 0x1, 0xa, 0x3, 0x6, 0xf30, 0x100, 0x6, 0x4, 0x9, 0x401, 0x4, 0x0, 0xfffffff7, 0x9, 0x4, 0x9985, 0xfffffffc, 0x237, 0x900000, 0x800, 0x5, 0x9, 0x34, 0x7f, 0xdd7a, 0x8, 0x0, 0x7, 0x32, 0x5, 0x51, 0xffffffff, 0x80000001, 0x2, 0x7, 0x3, 0x6, 0x4, 0x400, 0xbf, 0x9, 0x6, 0x5, 0x7, 0x8, 0xe1, 0x8, 0x6, 0xfffffff8, 0x0, 0x6, 0xd8a, 0xffffefc5, 0x78, 0x81, 0x96, 0x2, 0x8, 0x57f, 0x6, 0x80, 0x1, 0x1258, 0x0, 0x2, 0x10000, 0x4, 0xd5ab, 0xfffffffa, 0x4, 0x3, 0x9, 0x6, 0x8c, 0x7, 0x3ff, 0x6fc, 0x254, 0x7, 0x5c9d, 0x8000000, 0x7, 0xe, 0x8, 0x737, 0x8, 0xe10, 0x9, 0x1000, 0x0, 0xed, 0x2, 0x401, 0x40, 0x0, 0x8, 0x9, 0x5, 0x6d10, 0x5, 0x800, 0x3, 0xfffffffd, 0xd, 0x8, 0x7c1, 0x1, 0x0, 0x5, 0x1, 0x9, 0x3000, 0xfffffffb, 0x9, 0x9, 0x1, 0x3, 0x800, 0x3a2, 0xfffffe01, 0x4, 0xe, 0x5, 0x6, 0xffff, 0x70b0, 0x1, 0x3ff, 0xbbe8, 0x0, 0x86, 0x1, 0xe1, 0x2, 0x2, 0x5, 0x1, 0x8, 0x26c, 0xa0, 0xe, 0x9, 0x80, 0x1, 0x7, 0x4, 0xa9, 0x0, 0x7, 0x4, 0x9, 0x24d0, 0x401, 0xfb56, 0x6, 0x9, 0x1, 0xffff, 0x7, 0x20000007, 0xc32b, 0xa, 0x553, 0x401, 0x8, 0xf3e, 0x5, 0x80, 0x4, 0xb, 0xf54, 0x6, 0x2, 0x800, 0x6, 0x101, 0x1000, 0x6, 0x0, 0x81, 0x1]}) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x41) kqueue() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. login: pckbd_enable: command error panic: kernel diagnostic assertion "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_sig.c", line 1602 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *500548 86387 -1 0x8010 0xc000000 1 syz-executor 3583 77730 0 0x2 0 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff834b79a3) at panic+0x1e5 __assert(ffffffff834fa6b1,ffffffff8345e175,642,ffffffff834400f2) at __assert+0x29 process_stop(ffff80003c3d09c0,8000000,1) at process_stop+0x3fe cursig(ffff8000ffff27e0,ffff80003c3ca788,0) at cursig+0x509 userret(ffff8000ffff27e0) at userret+0x203 syscall(ffff80003c3ca8c0) at syscall+0x9ce Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36df2e7bde0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "ISSET(p->p_flag, P_SUSPSIG | P_SUSPSINGLE) == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_sig.c", line 1602 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff834b79a3) at panic+0x1e5 __assert(ffffffff834fa6b1,ffffffff8345e175,642,ffffffff834400f2) at __assert+0x29 process_stop(ffff80003c3d09c0,8000000,1) at process_stop+0x3fe cursig(ffff8000ffff27e0,ffff80003c3ca788,0) at cursig+0x509 userret(ffff8000ffff27e0) at userret+0x203 syscall(ffff80003c3ca8c0) at syscall+0x9ce Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36df2e7bde0, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c3ca5a0 rbx 0xffff80002999ee07 rdx 0 rcx 0xffff8000ffff27e0 rax 0xffff80002999dff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xa2781c08e690b6a r11 0xe508288cd7d23720 r12 0xffff80002999ec08 r13 0 r14 0 r15 0x1 rip 0xffffffff817e0d95 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c3ca590 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=500548 pid=86387 tcnt=3 stat=onproc flags process=8010 proc=c000000 runpri=32, usrpri=56, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=2 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff3770,0xffff8000ffff3250 process=0xffff80003c3d09c0 user=0xffff80003c3c5000, vmspace=0xfffff7800f8ed5d8 estcpu=6, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 99520 318142 97979 0 2 0 syz-executor 99520 3088 97979 0 2 0x4000000 syz-executor 20302 448213 77730 0 2 0 syz-executor 20302 19232 77730 0 3 0x4000080 piperd syz-executor 20302 427137 77730 0 3 0x4000080 kqread syz-executor 86387 345472 44988 -1 2 0x8008010 syz-executor 86387 207996 44988 -1 4 0xc008010 syz-executor *86387 500548 44988 -1 7 0xc008010 syz-executor 38563 100513 76341 0 2 0xc80 syz-executor 38563 367559 76341 0 3 0x4000000 smrbar syz-executor 35596 258537 89533 0 3 0x82 piperd syz-executor 76341 463756 89533 0 2 0xc82 syz-executor 30814 53638 89533 0 3 0x82 piperd syz-executor 99544 14885 89533 0 3 0x82 piperd syz-executor 77730 3583 89533 0 7 0x2 syz-executor 36114 103705 89533 0 2 0x10000c82 syz-executor 44988 43683 89533 0 2 0xc82 syz-executor 97979 480824 89533 0 2 0xc82 syz-executor 89533 439372 64424 0 2 0xc82 syz-executor 64424 308282 29666 0 3 0x10008a sigsusp ksh 29666 509731 38340 0 3 0x98 kqread sshd-session 38340 329994 52790 0 3 0x92 kqread sshd-session 61460 267360 1 0 3 0x100083 ttyin getty 52790 248337 1 0 3 0x88 kqread sshd 13720 157199 47055 74 3 0x1100092 bpf pflogd 47055 140145 1 0 3 0x80 sbwait pflogd 68076 519014 45044 73 3 0x1100090 kqread syslogd 45044 132431 1 0 3 0x100082 sbwait syslogd 96222 386108 1 0 3 0x100080 kqread resolvd 90598 305299 5282 77 3 0x100092 kqread dhcpleased 94767 439604 5282 77 3 0x100092 kqread dhcpleased 5282 162709 1 0 3 0x80 kqread dhcpleased 76450 314626 0 0 2 0x14200 smr 33881 477421 0 0 3 0x14200 pgzero zerothread 9707 66214 0 0 3 0x14200 aiodoned aiodoned 76669 186533 0 0 3 0x14200 syncer update 75790 34880 0 0 3 0x14200 cleaner cleaner 63181 344033 0 0 3 0x14200 reaper reaper 88188 384183 0 0 3 0x14200 pgdaemon pagedaemon 70936 133668 0 0 3 0x14200 bored viomb 6134 311863 0 0 3 0x40014200 acpi0 acpi0 24838 272337 0 0 3 0x40014200 idle1 53142 122219 0 0 3 0x14200 bored softnet1 79181 332664 0 0 3 0x14200 bored softnet0 53583 7852 0 0 3 0x14200 bored systqmp 2125 21346 0 0 3 0x14200 bored systq 56198 220751 0 0 3 0x14200 tmoslp softclockmp 7828 420744 0 0 3 0x40014200 tmoslp softclock 19250 270350 0 0 3 0x40014200 idle0 1 46678 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex &sched_lock r = 0 (0xffffffff83aa9d48) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 cursig+0x4ee #3 userret+0x203 #4 syscall+0x9ce #5 Xsyscall+0x128 exclusive mutex &pr->ps_mtx r = 0 (0xffff80003c3d0ad8) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 cursig+0x4c2 #3 userret+0x203 #4 syscall+0x9ce #5 Xsyscall+0x128 Process 38563 (syz-executor) thread 0xffff8000fffeaa80 (367559) exclusive rwlock clonelk r = 0 (0xffffffff838f47b8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 if_clone_destroy+0x93 #3 ifioctl+0x59d #4 fifo_ioctl+0x12f #5 VOP_IOCTL+0xac #6 vn_ioctl+0xf8 #7 sys_ioctl+0x674 #8 syscall+0xbd4 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11054 12085K 12101K 166960K 12149 0 pcb 21 12K 12K 166960K 28 0 rtable 237 6K 7K 166960K 351 0 pf 34 17K 18K 166960K 45 0 ifaddr 43 7K 7K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 1484 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1287 81K 81K 166960K 1366 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 14 49K 93K 166960K 143 0 proc 70 115K 164K 166960K 552 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 4 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 1K 166960K 382 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 214 177K 187K 166960K 3122 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 39 78K 104K 166960K 1299 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 12 0K 2K 166960K 28 0 temp 34 9110K 9126K 166960K 3920 0 kqueue 15 24K 24K 166960K 30 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 33 0 30 1 0 1 1 0 8 0 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 46 0 25 1 0 1 1 0 8 0 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 10 0 6 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 78 0 66 1 0 1 1 0 8 0 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 20 0 0 1 0 1 1 0 8 0 pfstkey 128 20 0 0 1 0 1 1 0 8 0 pfstate 448 20 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 semapl 72 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1594 0 124 93 0 93 93 0 8 0 ffsino 296 1594 0 124 114 0 114 114 0 8 0 nchpl 144 1800 0 98 64 0 64 64 0 8 0 vnodes 216 1680 0 0 94 0 94 94 0 8 0 namei 1024 5505 0 5505 2 0 2 2 0 8 2 percpumem 16 50 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 6215 0 6215 4 2 2 3 1 8 2 plimitpl 152 29 0 12 1 0 1 1 0 8 0 sigapl 424 460 0 415 7 0 7 7 0 8 1 knotepl 120 54 0 0 2 0 2 2 0 8 0 kqueuepl 224 30 0 18 1 0 1 1 0 8 0 pipepl 344 127 0 99 3 0 3 3 0 8 0 fdescpl 528 444 0 416 3 0 3 3 0 8 0 filepl 160 1627 0 1402 10 0 10 10 0 8 0 lockfpl 104 9 0 6 1 0 1 1 0 8 0 lockfspl 48 6 0 3 1 0 1 1 0 8 0 sessionpl 144 25 0 16 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 101 0 87 1 0 1 1 0 8 0 zombiepl 144 416 0 415 1 0 1 1 0 8 0 processpl 1232 460 0 415 5 0 5 5 0 8 0 procpl 664 481 0 430 5 0 5 5 0 8 0 sockpl 752 157 0 121 4 0 4 4 0 8 0 mcl64k 65536 7 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 128 0 0 16 0 16 16 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 163 0 0 10 0 10 10 0 8 0 bufpl 280 2362 0 105 162 0 162 162 0 8 0 anonpl 32 3790 0 0 31 0 31 31 0 246 0 amapchunkpl 152 8762 0 8169 23 0 23 23 0 158 0 amappl16 200 1776 0 1759 5 1 4 5 0 8 2 amappl15 192 17 0 17 1 1 0 1 0 8 0 amappl14 184 430 0 429 1 0 1 1 0 8 0 amappl13 176 135 0 123 1 0 1 1 0 8 0 amappl12 168 696 0 669 2 0 2 2 0 8 0 amappl11 160 4 0 4 1 1 0 1 0 8 0 amappl10 152 68 0 54 1 0 1 1 0 8 0 amappl9 144 277 0 276 1 0 1 1 0 8 0 amappl8 136 100 0 98 1 0 1 1 0 8 0 amappl7 128 185 0 172 1 0 1 1 0 8 0 amappl6 120 159 0 157 1 0 1 1 0 8 0 amappl5 112 115 0 105 1 0 1 1 0 8 0 amappl4 104 292 0 272 1 0 1 1 0 8 0 amappl3 96 1497 0 1403 3 0 3 3 0 8 0 amappl2 88 538 0 478 2 0 2 2 0 8 0 amappl1 80 10477 0 9875 15 0 15 15 0 8 0 amappl 88 2394 0 2254 4 0 4 4 0 92 0 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 444 0 416 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 444 0 416 1 0 1 1 0 8 0 vmmpekpl 168 5811 0 5777 2 0 2 2 0 8 0 vmmpepl 168 38234 0 36488 87 0 87 87 0 357 5 vmsppl 488 443 0 416 5 0 5 5 0 8 1 rwobjpl 80 14626 0 13626 25 0 25 25 0 8 3 pdppl 4096 895 0 832 97 26 71 85 0 8 8 pvpl 32 11706 0 0 97 2 95 95 0 265 0 pmappl 256 443 0 416 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 270 0 29 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff839d1ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83aaa900) at __mp_lock+0x192 syscall(ffff80002a308c50) at syscall+0xaf4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76ec76f2e120, count: 9 ddb{0}> trace x86_ipi_db(ffffffff839d1ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83aaa900) at __mp_lock+0x192 syscall(ffff80002a308c50) at syscall+0xaf4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76ec76f2e120, count: -6 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff834b79a3) at panic+0x1e5 __assert(ffffffff834fa6b1,ffffffff8345e175,642,ffffffff834400f2) at __assert+0x29 process_stop(ffff80003c3d09c0,8000000,1) at process_stop+0x3fe cursig(ffff8000ffff27e0,ffff80003c3ca788,0) at cursig+0x509 userret(ffff8000ffff27e0) at userret+0x203 syscall(ffff80003c3ca8c0) at syscall+0x9ce Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36df2e7bde0, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff834b79a3) at panic+0x1e5 __assert(ffffffff834fa6b1,ffffffff8345e175,642,ffffffff834400f2) at __assert+0x29 process_stop(ffff80003c3d09c0,8000000,1) at process_stop+0x3fe cursig(ffff8000ffff27e0,ffff80003c3ca788,0) at cursig+0x509 userret(ffff8000ffff27e0) at userret+0x203 syscall(ffff80003c3ca8c0) at syscall+0x9ce Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36df2e7bde0, count: -8