Warning: Permanently added '10.128.0.68' (ECDSA) to the list of known hosts. 2020/03/18 20:15:55 fuzzer started 2020/03/18 20:16:03 dialing manager at 10.128.15.235:32835 2020/03/18 20:16:03 syscalls: 338 2020/03/18 20:16:03 code coverage: enabled 2020/03/18 20:16:03 comparison tracing: enabled 2020/03/18 20:16:03 extra coverage: support is not implemented in syzkaller 2020/03/18 20:16:03 setuid sandbox: enabled 2020/03/18 20:16:03 namespace sandbox: support is not implemented in syzkaller 2020/03/18 20:16:03 Android sandbox: support is not implemented in syzkaller 2020/03/18 20:16:03 fault injection: support is not implemented in syzkaller 2020/03/18 20:16:03 leak checking: support is not implemented in syzkaller 2020/03/18 20:16:03 net packet injection: enabled 2020/03/18 20:16:03 net device setup: support is not implemented in syzkaller 2020/03/18 20:16:03 concurrency sanitizer: support is not implemented in syzkaller 2020/03/18 20:16:03 devlink PCI setup: support is not implemented in syzkaller 20:16:07 executing program 0: r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wskbd\x00', 0x2, 0x0) read(r0, &(0x7f0000000040)=""/83, 0x53) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse\x00', 0x80, 0x0) fchdir(r1) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/wsmouse\x00', 0x80, 0x0) r2 = kqueue() r3 = socket(0x23, 0x6, 0x1f) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x1, 0x3, 0x49) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200)='/dev/wskbd0\x00', 0x100, 0x0) kevent(r2, &(0x7f0000000140)=[{{r3}, 0xfffffffffffffffa, 0x40, 0xcde11ba37a523e4f, 0x5, 0x80}, {{0xffffffffffffff9c}, 0xfffffffffffffffb, 0x40, 0x2, 0x4, 0x4}, {{r4}, 0xfffffffffffffff8, 0x18, 0x8, 0x10001, 0x5}, {{r0}, 0xb839d82db4507ea5, 0xf3115a4c517bfac1, 0x80, 0x9, 0x284690b4}, {{r5}, 0xfffffffffffffffa, 0x32, 0x80000000, 0x8, 0x4}, {{r0}, 0xfffffffffffffffc, 0x4, 0xf0000000, 0xd3c2, 0x8a}], 0x1a359fc1, &(0x7f0000000240)=[{{r1}, 0xfffffffffffffff9, 0xea, 0x1, 0x0, 0x2}, {{r6}, 0xfffffffffffffffe, 0x18, 0xf0000000, 0xa7, 0x7bd3}], 0x8, &(0x7f0000000280)={0x8, 0x200}) socket$inet(0x2, 0x2, 0x3) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SPKRTUNE(r7, 0x20005302, &(0x7f0000000300)={0x4, 0x8000}) r8 = dup(0xffffffffffffffff) ioctl$WSMOUSEIO_GETPARAMS(r8, 0x80105727, &(0x7f0000000380)={&(0x7f0000000340)=[{0x26, 0x7f}], 0x1}) r9 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmdt(r9) close(r3) socket$inet6(0x18, 0x4000, 0x6) 20:16:07 executing program 1: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt(r0, 0x2eb7, 0x5, &(0x7f0000000080)="2d066d57f2cc918357ec8da3e041eef06b1e7551f1b976c465f20654f27156d2c2df8dd77e25db0d91f638cf4157b4eef178859ae7c6c3eab5b973fd891549ee75ad5cd24ff31c9a7ed4c726ecd3ac968c2d43f35290ece699f2d3b9e43980eb7cc0a3a073c975b5d6a2af2eb777552677e6f3c4c3c9e07a481f364af548f83cd0cedb94edd1bf10df5c69a1833a2093c9b21ba2ea3567308fb8aa92828fe1c0247c1fc31cb2d2", 0xa7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r1, 0x5, 0x1, &(0x7f0000000180)="e4ffbefe8bd7d6289307f3a16a8a268b319a3569e2eaad24f501d5df4eeb6c7f65e0881aed6a378143abccdf03e72c181a1e3ce0c5432fc39a9d5db76e9391b3c9c04af0574285375d1e3199b7a1f327397a7c4ad80c049c5f6f59a802a334ae560dfb6f5c3fba1bb1d65164735c029adec5fe474f48d51ed3e22441f30d4f3723a8655fade3829fc3e2f2c62f99d12c435c89480d1e4a3a59bad7f188c5dbd6cce2376167ea41d5c7bc8cca74c8265191a3f38909a0", 0xb6) setsockopt(r1, 0xff, 0x0, &(0x7f0000000240)="972e3bdd263a0b7e528c716ace04e6fa993f1bb5c724b4a3485bd634927ca27c2fa9269c2b84b7d478834e87dd7b45c2", 0x30) socketpair(0x2, 0x4000, 0xd2, &(0x7f0000000280)={0xffffffffffffffff}) accept(r2, &(0x7f00000002c0)=@in6, &(0x7f0000000300)=0xc) sync() r3 = dup(r1) sendto(r3, &(0x7f0000000340)="cef5a7dbacdc19166fd16c7b8f8111b5230c3b0123ba38b59abda71466c2bc099302071e51a13857641f1f39907304b2f0a66fc329bdf987e8b11d9ae18d6a46712e23d73d751584b72f43c756097f40c5b50f33d7e5c74ac1480a45bf90795f61c52375d7e341751f12e08532ceafd9bbbbbc7d711c8a82ae09b2795a49c9e03adaafce9246487ad1cab3cb42ea5889522161053abac3e1bde61ff9147130cb082e7b3a680cd5dbd7dbc111eb6a179318dd7a1a4de8afdbaf50546cc73acd3d1ef703951813e3dcb4f76039d5881927e50d8f63c99cfa560fbe38c0f443f1275045bb7734d835172a38", 0xea, 0x0, &(0x7f0000000440)=@in6={0x18, 0x0, 0x15e2, 0x3}, 0xc) ioctl$TIOCSWINSZ(0xffffffffffffff9c, 0x80087467, &(0x7f0000000480)={0x0, 0x3, 0x80, 0x9}) msgget$private(0x0, 0x1) r4 = socket(0x6, 0x4000, 0x81) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000004c0), &(0x7f0000000500)=0xc) ioctl$TIOCSETD(0xffffffffffffff9c, 0x8004741b, &(0x7f0000000540)=0x2) r5 = socket$inet(0x2, 0x8000, 0xe) setsockopt$sock_int(r5, 0xffff, 0x800, &(0x7f0000000580)=0x8001, 0x4) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f00000005c0)=0x9) r6 = msgget(0x0, 0x428) msgctl$IPC_RMID(r6, 0x0) login: pckbd_enable: command error 20:16:10 executing program 1: mknod(&(0x7f0000000100)='./file0\x00', 0x100002000, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="cb", 0xfe21}], 0x1) utimes(&(0x7f0000000040)='\x00', &(0x7f0000000080)={{0x3, 0x3a}, {0x5}}) execve(0x0, 0x0, 0x0) 20:16:10 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1fd], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xbfbff7ffffffffff], [0x0, 0x6, 0x401], [{}, {}, {}, {}, {0x0, 0x103}, {0x0, 0x0, 0xfffffffd}]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f0000001180)=[{0x5}]}) fcntl$getown(r2, 0x5) 20:16:10 executing program 1: r0 = socket(0x2, 0x3, 0xf0) connect$unix(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f0000001180)=[{0x5}]}) readv(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/188, 0xbc}, {&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000240)=""/189, 0xbd}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000380)=""/1, 0x1}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000000400)=""/189, 0xbd}], 0x7) write(r0, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000005c0), &(0x7f0000000080)=0xc) socketpair(0x2, 0x2, 0x2, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000580), 0xc) 20:16:10 executing program 0: pipe2(&(0x7f0000000140), 0x0) socket$inet(0x2, 0x3, 0x0) socket(0x18, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffc, 0x3, 0x0, 0xfffffffffffffff7}], 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="82020000ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) sendto$unix(r1, &(0x7f0000000100)="749703210f6e83f89087515ab45713442de6", 0x12, 0x0, 0x0, 0x0) 20:16:10 executing program 1: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = socket(0x18, 0x1, 0x0) close(r1) mlockall(0x0) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r3, &(0x7f0000000180)="dc03764494922a3d09485c1d148545c6904876eff645b5251f684a408b1dac18e346064e59b0e843e333e124220e1afded94ba7ef7ca19b6ae974a5b333dfb8254313c1e76f68d17df2b9809e333f6dcc9f7d9e6de7780e7711f6fa2f9e02cafeeacc9cb6670b1d26bc2dcfcf130f8fd227901706059f021de4aba76e2fcbc3dbcf630d5868e1d8188f6a42b52471485a8eeeb5ab942091b6296c22e0a87bff9a5fe19f801ac324b87574139981ec0e48a5b56c7372b6900fcb6fb8ca976ea834f8ab9dab0040b51f2b0a0599ac71e62feefa25bec0bea5f7b610c38536b9141771b3f59bae6782f", 0xe8) 20:16:10 executing program 0: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) fchdir(r0) setsockopt(r0, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = socket(0x18, 0x1, 0x0) socket$inet6(0x18, 0x3, 0x3) close(r1) r2 = socket(0x18, 0x2, 0x0) close(r2) socket(0x400000000018, 0x3, 0x3b) socket$inet6(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r2, 0x0, 0x0) 20:16:10 executing program 0: openat$speaker(0xffffffffffffff9c, &(0x7f0000000000)='/dev/speaker\x00', 0x1, 0x0) socket(0x2, 0x3, 0xa1) execve(0x0, 0x0, 0x0) 20:16:10 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000000)=0x9, 0x4) connect$unix(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x10) dup2(r1, r0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:16:10 executing program 1: r0 = socket(0x800000018, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) listen(r0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x0, 0x81, 0x0, 0x0, "000000000000000100002000001b00"}) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0x3e, &(0x7f00000001c0)="4b74954c", 0x4) r2 = socket(0x18, 0x1, 0x0) close(r2) fcntl$dupfd(r1, 0x0, r2) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 20:16:10 executing program 0: chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x4d}, {0x81}, {0x6}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f0000001180)=[{0x5}]}) r2 = dup(r1) ioctl$VMM_IOC_READREGS(r2, 0xc2485607, &(0x7f0000000240)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000200)="b69cc6bf6ffff62ff34b940ab726") 20:16:10 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000740)="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", 0x1cb}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)="0ec465cdab1ab6925cb81235dbb17399c070dde203e502106f690d9947364fe3569560e73bfa9012263c0ef6eb626ad79d51e7b4607879072ca33809a85443bef8e011b3e2e63de6f9637ca6e422106a6a1762b67f560814eef6dcb3f39a2e51600251fbad1ee82088a75ca3764729af3f3d4d967ce8aadb3c3fd7f9ae4f4c83b2", 0x81}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, r0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) 20:16:10 executing program 1: mknod(&(0x7f0000000080)='./bus\x00', 0x2080002002, 0x40004200000028ac) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = kqueue() r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f0000001180)=[{0x5}]}) r3 = getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xbab31a7a8d6a2ca0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, r5) fchown(r2, r3, r5) kevent(r1, &(0x7f0000000100), 0x6, 0x0, 0x40000009d1, &(0x7f0000000140)={0x3, 0x7fffffff}) r6 = kqueue() kevent(r6, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffff8, 0x43, 0x1, 0x200000000, 0x7}, {{r1}, 0xfffffffffffffff9, 0x100, 0x2, 0x7, 0x96a}], 0x5, 0x0, 0x8, 0x0) r7 = kqueue() kevent(r7, &(0x7f0000000100), 0x6, 0x0, 0x8, 0x0) r8 = kqueue() kevent(r8, &(0x7f0000000000), 0x66, 0x0, 0x81, 0x0) dup2(r6, r1) Ë./file0 !þpanic: receive 1a: so 0xfffffd806f6ed190, so_type 3, m 0xfffffd807f01fa00, m_type 0 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 312470 77427 0 0 0x4000080 1 syz-executor.1 *103502 8095 0 0 0 0K dhclient db_enter() at db_enter+0x18 panic(ffffffff821e0766) at panic+0x15c soreceive(fffffd806f6ed190,0,ffff800020aad758,0,0,ffff800020aad664) at soreceive+0x174a soo_read(fffffd8079ffc428,ffff800020aad758,0) at soo_read+0x53 dofilereadv(ffff800020a6c758,6,ffff800020aad758,0,ffff800020aad840) at dofilereadv+0x1a1 sys_read(ffff800020a6c758,ffff800020aad7f0,ffff800020aad840) at sys_read+0x83 syscall(ffff800020aad8c0) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffec8e0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic receive 1a: so 0xfffffd806f6ed190, so_type 3, m 0xfffffd807f01fa00, m_type 0 ddb{0}> trace db_enter() at db_enter+0x18 panic(ffffffff821e0766) at panic+0x15c soreceive(fffffd806f6ed190,0,ffff800020aad758,0,0,ffff800020aad664) at soreceive+0x174a soo_read(fffffd8079ffc428,ffff800020aad758,0) at soo_read+0x53 dofilereadv(ffff800020a6c758,6,ffff800020aad758,0,ffff800020aad840) at dofilereadv+0x1a1 sys_read(ffff800020a6c758,ffff800020aad7f0,ffff800020aad840) at sys_read+0x83 syscall(ffff800020aad8c0) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffec8e0, count: -8 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff800020aad4a0 rbx 0xffff800020aad550 rdx 0xffff800020a6c758 rcx 0 rax 0 r8 0xffffffff81053b4f kprintf+0x16f r9 0x1 r10 0x25 r11 0xd4fada82d290b61a r12 0x3000000008 r13 0xffff800020aad4b0 r14 0x100 r15 0x1 rip 0xffffffff81fec828 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800020aad490 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (dhclient) pid=103502 stat=onproc flags process=0 proc=0 pri=24, usrpri=53, nice=20 forw=0xffffffffffffffff, list=0xffff800020a6cea8,0xffff800020a6c9d8 process=0xffff800020a80f70 user=0xffff800020aa8000, vmspace=0xfffffd807f000000 estcpu=3, cpticks=13, pctcpu=0.0 user=0, sys=13, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 77427 430917 36229 0 2 0 syz-executor.1 77427 312470 36229 0 7 0x4000080 syz-executor.1 48700 265000 41206 0 2 0 syz-executor.0 48700 507546 41206 0 2 0x4000000 syz-executor.0 36229 51922 88811 0 2 0x482 syz-executor.1 41206 171836 88811 0 2 0x482 syz-executor.0 88811 270421 8614 0 3 0x82 thrsleep syz-fuzzer 88811 114494 8614 0 3 0x4000082 thrsleep syz-fuzzer 88811 150210 8614 0 3 0x4000082 thrsleep syz-fuzzer 88811 80533 8614 0 3 0x4000082 thrsleep syz-fuzzer 88811 344993 8614 0 3 0x4000082 thrsleep syz-fuzzer 88811 295350 8614 0 3 0x4000082 thrsleep syz-fuzzer 88811 34621 8614 0 3 0x4000082 thrsleep syz-fuzzer 88811 95468 8614 0 2 0x4000482 syz-fuzzer 88811 499231 8614 0 3 0x4000082 kqread syz-fuzzer 88811 234998 8614 0 3 0x4000082 thrsleep syz-fuzzer 8614 128345 22415 0 3 0x10008a pause ksh 22415 249462 84716 0 3 0x92 select sshd 64248 387818 1 0 3 0x100083 ttyin getty 84716 515172 1 0 3 0x80 select sshd 27234 27955 25624 74 2 0x100492 pflogd 25624 383684 1 0 3 0x80 netio pflogd 79521 111225 66598 73 3 0x100090 kqread syslogd 66598 449604 1 0 3 0x100082 netio syslogd 69251 71940 1 77 3 0x100090 poll dhclient * 8095 103502 1 0 7 0 dhclient 12865 61446 0 0 2 0x14200 smr 48821 428439 0 0 2 0x14200 zerothread 80173 324704 0 0 3 0x14200 aiodoned aiodoned 51592 164320 0 0 3 0x14200 syncer update 26087 104218 0 0 3 0x14200 cleaner cleaner 56291 352378 0 0 3 0x14200 reaper reaper 47787 84344 0 0 3 0x14200 pgdaemon pagedaemon 76295 312555 0 0 3 0x14200 bored crynlk 50943 132345 0 0 3 0x14200 bored crypto 45290 324589 0 0 3 0x40014200 acpi0 acpi0 74471 42707 0 0 3 0x40014200 idle1 39484 498359 0 0 3 0x14200 bored softnet 248 472306 0 0 3 0x14200 bored systqmp 77653 60922 0 0 3 0x14200 bored systq 37986 348449 0 0 2 0x40014200 softclock 31150 498960 0 0 3 0x40014200 idle0 1 491581 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 48700 (syz-executor.0) thread 0xffff800020ac6eb8 (507546) exclusive rrwlock inode r = 0 (0xfffffd80645b1e70) #0 witness_lock+0x4c5 #1 rw_enter+0x453 #2 rrw_enter+0x88 #3 ufs_ihashins+0x45 #4 ffs_vget+0x13e #5 ffs_inode_alloc+0x1cf #6 ufs_mkdir+0xf4 #7 VOP_MKDIR+0xc6 #8 domkdirat+0x121 #9 syscall+0x4a4 #10 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806b442a28) #0 witness_lock+0x4c5 #1 rw_enter+0x453 #2 rrw_enter+0x88 #3 VOP_LOCK+0x4b #4 vn_lock+0x81 #5 vfs_lookup+0xe6 #6 namei+0x63c #7 domkdirat+0x75 #8 syscall+0x4a4 #9 Xsyscall+0x128 Process 8095 (dhclient) thread 0xffff800020a6c758 (103502) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82637fe0) #0 witness_lock+0x4c5 #1 solock+0x66 #2 soreceive+0x114 #3 soo_read+0x53 #4 dofilereadv+0x1a1 #5 sys_read+0x83 #6 syscall+0x4a4 #7 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9487 6531K 6531K 78643K 10589 0 pcb 13 8K 8K 78643K 32 0 rtable 105 3K 3K 78643K 201 0 ifaddr 49 11K 11K 78643K 52 0 counters 45 34K 34K 78643K 45 0 ioctlops 0 0K 4K 78643K 1471 0 mount 1 1K 1K 78643K 1 0 vnodes 1223 77K 77K 78643K 1232 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 3 0 VM map 2 1K 1K 78643K 2 0 sem 2 0K 0K 78643K 2 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 196K 290K 78643K 12766 0 file desc 6 17K 25K 78643K 48 0 proc 59 63K 95K 78643K 438 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 2 0 in_multi 33 2K 2K 78643K 37 0 ether_multi 1 0K 0K 78643K 3 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 19 95K 95K 78643K 19 0 exec 0 0K 1K 78643K 211 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 99 21K 21K 78643K 1049 0 UVM aobj 2 2K 2K 78643K 2 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 10 0 NDP 7 0K 0K 78643K 11 0 temp 74 3036K 3100K 78643K 2093 0 kqueue 3 4K 4K 78643K 3 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 19 0 17 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 31 0 21 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 63 0 63 1 0 1 1 0 8 1 tcpcb 544 24 0 20 1 0 1 1 0 8 0 inpcb 280 84 0 77 2 0 2 2 0 8 1 nd6 48 6 0 0 1 0 1 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 20 0 0 1 0 1 1 0 8 0 pfstkey 112 20 0 0 1 0 1 1 0 8 0 pfstate 328 20 0 0 2 0 2 2 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 188 0 0 12 0 12 12 0 8 0 art_table 32 189 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1448 0 36 46 0 46 46 0 8 0 ffsino 272 1448 0 36 95 0 95 95 0 8 0 nchpl 144 1686 0 69 60 0 60 60 0 8 0 uvmvnodes 72 1500 0 0 28 0 28 28 0 8 0 vnodes 208 1500 0 0 79 0 79 79 0 8 0 namei 1024 4286 0 4285 1 0 1 1 0 8 0 percpumem 16 33 0 0 1 0 1 1 0 8 0 scxspl 192 5136 0 5136 8 1 7 7 0 8 7 plimitpl 152 15 0 7 1 0 1 1 0 8 0 sigapl 424 263 0 231 4 0 4 4 0 8 0 futexpl 56 251 0 251 1 0 1 1 0 8 1 knotepl 112 53 0 34 1 0 1 1 0 8 0 kqueuepl 144 5 0 2 1 0 1 1 0 8 0 pipelkpl 48 77 0 67 1 0 1 1 0 8 0 pipepl 120 154 0 135 1 0 1 1 0 8 0 fdescpl 496 248 0 231 3 0 3 3 0 8 0 filepl 152 1218 0 1114 5 0 5 5 0 8 1 lockfpl 104 5 0 4 1 0 1 1 0 8 0 lockfspl 48 3 0 2 1 0 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 18 0 7 1 0 1 1 0 8 0 ucredpl 96 45 0 36 1 0 1 1 0 8 0 zombiepl 144 231 0 231 1 0 1 1 0 8 1 processpl 984 263 0 231 5 0 5 5 0 8 1 procpl 624 300 0 257 4 0 4 4 0 8 0 sockpl 400 134 0 115 3 0 3 3 0 8 1 mcl4k 4096 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 153 0 0 19 0 19 19 0 8 0 mtagpl 80 1 0 0 1 0 1 1 0 8 0 mbufpl 256 167 0 0 10 0 10 10 0 8 0 bufpl 280 4079 0 174 279 0 279 279 0 8 0 anonpl 16 35663 0 23335 51 1 50 50 0 124 0 amapchunkpl 152 1066 0 930 8 0 8 8 0 158 1 amappl16 192 857 0 198 33 0 33 33 0 8 0 amappl15 184 1 0 0 1 0 1 1 0 8 0 amappl14 176 14 0 11 2 1 1 1 0 8 0 amappl13 168 25 0 24 1 0 1 1 0 8 0 amappl12 160 6 0 5 2 1 1 1 0 8 0 amappl11 152 76 0 58 1 0 1 1 0 8 0 amappl10 144 23 0 16 1 0 1 1 0 8 0 amappl9 136 389 0 386 1 0 1 1 0 8 0 amappl8 128 297 0 284 1 0 1 1 0 8 0 amappl7 120 126 0 114 1 0 1 1 0 8 0 amappl6 112 29 0 24 1 0 1 1 0 8 0 amappl5 104 139 0 124 1 0 1 1 0 8 0 amappl4 96 508 0 476 1 0 1 1 0 8 0 amappl3 88 116 0 107 1 0 1 1 0 8 0 amappl2 80 1052 0 975 3 0 3 3 0 8 1 amappl1 72 15356 0 14903 25 8 17 20 0 8 7 amappl 80 555 0 510 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 1 0 0 1 0 1 1 0 8 0 uaddrrnd 24 248 0 231 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 248 0 231 1 0 1 1 0 8 0 vmmpekpl 168 5871 0 5842 2 0 2 2 0 8 0 vmmpepl 168 36814 0 34933 106 5 101 101 0 357 19 vmsppl 368 247 0 231 2 0 2 2 0 8 0 pdppl 4096 504 0 462 6 0 6 6 0 8 0 pvpl 32 131210 0 115691 132 0 132 132 0 265 6 pmappl 232 247 0 231 2 0 2 2 0 8 1 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 162 0 3 5 0 5 5 0 8 0