kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Sun Mar 15 06:52:22 PDT 2020 OpenBSD/amd64 (ci-openbsd-multicore-2.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.65' (ECDSA) to the list of known hosts. 2020/03/15 06:52:31 fuzzer started 2020/03/15 06:52:38 dialing manager at 10.128.15.235:43927 2020/03/15 06:52:38 syscalls: 338 2020/03/15 06:52:38 code coverage: enabled 2020/03/15 06:52:38 comparison tracing: enabled 2020/03/15 06:52:38 extra coverage: support is not implemented in syzkaller 2020/03/15 06:52:38 setuid sandbox: enabled 2020/03/15 06:52:38 namespace sandbox: support is not implemented in syzkaller 2020/03/15 06:52:38 Android sandbox: support is not implemented in syzkaller 2020/03/15 06:52:38 fault injection: support is not implemented in syzkaller 2020/03/15 06:52:38 leak checking: support is not implemented in syzkaller 2020/03/15 06:52:38 net packet injection: enabled 2020/03/15 06:52:38 net device setup: support is not implemented in syzkaller 2020/03/15 06:52:38 concurrency sanitizer: support is not implemented in syzkaller 2020/03/15 06:52:38 devlink PCI setup: support is not implemented in syzkaller 06:52:43 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x80) ioctl$TIOCSTART(r0, 0x2000746e) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x1ffcc09, 0x80}, {0x100000001, 0x3}}, 0x2) getpeername$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) msgget(0x0, 0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc) r3 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc) r5 = fcntl$getown(r0, 0x5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x4, r1, r2, r3, r4, 0x30}, 0x4, 0xd0, r5, 0x0, 0x5, 0x195, 0x10000, 0x27}) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000280)={0x0}, 0xc) getpgid(r6) r7 = open(&(0x7f00000002c0)='./file0\x00', 0x80, 0x160) utimensat(r7, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={{0x8000, 0x2}, {0x80, 0x7fffffff}}, 0x2) ioctl$KDDISABIO(r0, 0x20004b3d) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x800, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r8, 0x80105727, &(0x7f0000000400)={&(0x7f00000003c0)=[{0x41, 0x1}, {0x88, 0x4}, {0x81, 0x636}, {0x88, 0x5}, {0x21, 0x4}, {0x8a, 0x7132}, {0x1}], 0x7}) ioctl$BIOCVERSION(r8, 0x40044271, &(0x7f0000000440)) ioctl$FIONREAD(0xffffffffffffff9c, 0x4004667f, &(0x7f0000000480)) 06:52:43 executing program 1: r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000)='/dev/diskmap\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x40) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) ioctl$VMM_IOC_WRITEREGS(r1, 0x82485608, &(0x7f0000000080)={0x2, 0xb36ac000, 0xabb1, {[0x8000000000000, 0x7, 0x7fff, 0x81, 0x1f, 0x10000, 0x7, 0xb37, 0x4, 0x9c, 0x0, 0x1, 0x4, 0x6, 0x0, 0x7b89, 0xf9, 0xd3], [0x35a9, 0x8, 0x8, 0x1, 0x80000001, 0x3, 0x3, 0x4, 0x9, 0x80000000], [0x5, 0x9, 0x9, 0x0, 0x0, 0x3800000000000, 0x401], [0x0, 0x8, 0x8, 0xffffffffffffffc1, 0xd07, 0x7f], [{0x3ff, 0x664, 0xffff, 0x5}, {0xfff, 0x5, 0x4, 0x1f}, {0x6, 0x401, 0x68, 0x8}, {0xcc, 0x7ff, 0xffffffc0, 0xb9}, {0x3f, 0x4, 0x68000000, 0x4}, {0x1, 0x4, 0x9, 0x8}, {0x100, 0xffffffff, 0x80000001, 0x1}, {0xc92, 0x3, 0x7a47, 0x5}], {0xaec8, 0x200, 0x3, 0x20}, {0x4, 0x400, 0x0, 0x80000000}}}) recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/142, 0x8e, 0x800, &(0x7f00000003c0)=@un=@file={0x1, './file0\x00'}, 0xa) clock_settime(0x2, &(0x7f0000000400)={0x0, 0x1000}) pwrite(r0, &(0x7f0000000440)="cc93e08a8528ee63e2245b25ff81b340f9c27eb4a93bd7ee3d3b78dc9684b8d5a6b312ca7514d9116ec1c6f5a269018a3536f039951fb71f01a4190ecd7aa84f5bdf20cfe08fc947cd231e9369bd0f50cd3eb6f02755ea0aef6d5074aadcbc19dc3a43156ee26b38dfb95062fe88a9ab84c0a5e80bbd5d1f63acb59f0f", 0x7d, 0x0, 0x6) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMODE(r2, 0x40045714, &(0x7f0000000500)) r3 = socket(0x0, 0x2, 0x0) accept$inet6(r3, &(0x7f0000000540), &(0x7f0000000580)=0xc) socketpair(0x10, 0x4, 0x4, &(0x7f00000005c0)={0xffffffffffffffff}) listen(r4, 0x1ff) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000600)='/dev/wskbd0\x00', 0x8, 0x0) r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/wskbd\x00', 0x400, 0x0) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000680)={0x0, 0x0}, 0xc) getgroups(0x2, &(0x7f00000006c0)=[0x0, 0x0]) fchown(r5, r6, r7) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/wsmouse0\x00', 0x80, 0x0) fsync(0xffffffffffffffff) 06:52:45 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000740)="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", 0x1cb}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000200)="0ec465cdab1ab6925cb81235dbb17399c070dde203e502106f690d9947364fe3569560e73bfa9012263c0ef6eb626ad79d51e7b4607879072ca33809a85443bef8e011b3e2e63de6f9637ca6e422106a6a1762b67f560814eef6dcb3f39a2e51600251fbad1ee82088a75ca3764729af3f3d4d967ce8aadb3c3fd7f9ae4f4c83b2", 0x81}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f00000002c0)="90a45c4c16e2280b7d517b7462bef11e2d64ba033e5be415aa8a169d75db45b2e4dedcdee7468afda5a6d1e439691d3ea4a0ddd46201f5c0418210730e8d8e000000", 0x42}], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, r0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x10) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) rmdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) 06:52:45 executing program 0: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = socket(0x18, 0x1, 0x0) pipe2(&(0x7f0000000100), 0x10000) r2 = socket$inet6(0x18, 0x3, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x1a, &(0x7f0000000040), 0x4) close(r1) r3 = socket(0x10, 0x4000, 0x8) close(r3) socket(0x400000000018, 0x3, 0x3b) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r3, &(0x7f0000000080)="b58b", 0x2) r4 = getpgid(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000180)={0x3, 0x0, 0x9, 0xffffffffffffffff, r4}) 06:52:45 executing program 0: openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0) r0 = syz_open_pts() kqueue() pwrite(r0, &(0x7f0000000240)="de2c88939965bae04acc411c9dba7aa349f5be51688f01422b05dfd2e56a0734178e68c8142676f6cae91ffb8b05bb6a553ddf385d97dee0efc53e821c7882932f20ee258a53cf8c4ed97c4b5823cdcd5ac790424ecda8ea3fa425e8f67ad1862fc5496b3be6c836df1fca6c261ec703db49b2a8594d6e619ac3c0e2a66c2d6a3fec28ccc9231466c2e98bda2878f0faa43b2d9fd4f19f5df98181526c9d70ef95c1cfcdb3cdcd3a71d22e7f241efc00a386064209a90ddc586d0a99939962408f4235e9590b6b59e18ad1", 0xcb, 0x0, 0x4) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x80, 0x0) socket(0x18, 0x2, 0x0) r3 = socket(0x18, 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r3) select(0x40, &(0x7f00000000c0)={0xef5}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000080)={0x698}, 0x0, 0x0, 0x0) dup2(r2, r1) 06:52:45 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x2001, 0x4086334) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$PCIOCREAD(r0, 0xc0107002, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setrlimit(0x6, &(0x7f0000000280)={0x7, 0x9c84}) fchownat(r0, &(0x7f0000000140)='./bus\x00', r1, r2, 0x2) ioctl$VT_RELDISP(0xffffffffffffffff, 0x20007604, &(0x7f0000000040)) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000100)) ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f00000002c0)={0x8ae, 0x4}) 06:52:45 executing program 1: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = semget$private(0x0, 0x4, 0x1b2) semop(r1, &(0x7f0000000400)=[{0x0, 0x100000001, 0x1000}, {0x0, 0x7fffffff, 0x1000}], 0x2) semctl$SETVAL(r1, 0x1, 0x8, &(0x7f0000000140)=0x3) unveil(&(0x7f0000000000)='.\x00', &(0x7f0000000080)) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='c\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x8) 06:52:45 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000000), 0x4) connect$unix(r0, &(0x7f0000000340)=@file={0xbd5699bc1ec0282, './file0/file0\x00'}, 0x10) shutdown(r0, 0x1) 06:52:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0, 0x160}], 0x1, 0x606dca73) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x29, 0x80000000000000a, &(0x7f0000000040)="90000000", 0x4) setsockopt(r2, 0x29, 0xb, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x10000221, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) pwritev(r3, &(0x7f00000003c0), 0x273, 0x0, 0x0) ftruncate(r3, 0x0, 0x7363) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x2, 0x10, r3, 0x0, 0x0) dup2(r1, r0) ioctl$TIOCCBRK(r0, 0x2000747a) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x5, 0x7, 0x2, 0x358}, {0x3, 0x0, 0x5a, 0x1}, {0x200, 0x2, 0x7, 0x20}, {0x9, 0x3, 0x9, 0x584}, {0x9f72, 0xdb, 0x20, 0x1000}]}) getitimer(0x0, &(0x7f00000000c0)) 06:52:45 executing program 0: r0 = socket(0x2, 0xc003, 0x2f) setsockopt(r0, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x0) flock(r0, 0x1) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000180)={0xfffffefffffffffd, 0x0, 0x7fffdfff, 0x7fffff82, "0710000000000040000820f90000f700faa36082"}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)="06886cc71af22faa5fbff4118f37ae7008802c056f335fc862dbdb9e1f86e2671590c8110ea090e5bf7566db698b6216c64e7d66fbd78d36c058c1943eddd660dfb8e6535bd13d0042efc0174b37af850480d02ae5c056e6c7451a45718e2da470cc2f0c770ddc60", 0x68}], 0x1) 06:52:45 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x0) getgroups(0x7, &(0x7f0000000080)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) setgroups(0x1, &(0x7f0000000200)=[0x0]) chown(&(0x7f00000001c0)='./file0\x00', 0x0, r0) setuid(0xee01) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f00000000c0)) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) chmod(&(0x7f0000000040)='./file0/file0\x00', 0x400) 06:52:45 executing program 1: r0 = syz_open_pts() flock(r0, 0x2) r1 = syz_open_pts() fcntl$lock(r1, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000}) flock(r1, 0x2) fcntl$lock(r1, 0x10000000000009, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000300000000}) fcntl$lock(r1, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x7, 0x101, 0xf4, 0x7, "b5e7e39cf6123f22e37e941d540154292f08d3f1", 0x3, 0x1}) fcntl$lock(r0, 0x10000000000009, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000300000000}) close(r0) syz_open_pts() syz_open_pts() 06:52:45 executing program 0: open$dir(&(0x7f00000002c0)='./file0\x00', 0xa8e329f9edf63bbd, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/pf\x00', 0x200, 0x0) pwritev(r0, &(0x7f0000001400)=[{&(0x7f0000000300)="3422f0d28710ef7e183b1bc0afe9455e4bf8a2108b9af608d33848670f991f7684f34b9dc423d3412fbe1c6e56127f453431ed3418a55342d5508b6a4be51d7ac63f587eb09d91d536b287c2e4f326d40240aada0a7319da44c4f2a9cc65a2c1d919a1afc36c2f6219de8a7570d61359c47f9c8396c84f6f63647789ce6b097be0f97c1b506dd93ad027cd29053e816c8469e803b60f2a2c404aa5747965cee5bdd03ca58fc10659098d54d184254ab36effd7785504aa1a3d1c51cb33b382996035d4472d", 0xc5}, {&(0x7f0000000400)="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", 0x1000}], 0x2, 0x0, 0x9) r1 = getpid() r2 = getpid() ktrace(&(0x7f0000000240)='./file0/file0\x00', 0x1, 0xfcfc96ac7f78639e, 0xffffffffffffffff) ktrace(&(0x7f00000001c0)='./file0\x00', 0x1, 0x24, r2) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r1) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/206, 0xce}], 0x3c1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0xc000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001440)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000240)}, 0x0) 06:52:45 executing program 0: setuid(0xee01) pledge(0x0, 0x0) execve(0x0, &(0x7f0000000040)=[&(0x7f0000000100)='/\xbb\x00'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='r\x00') 06:52:45 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000740)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x48}, {0x40}, {0x6, 0x0, 0x0, 0xfff}]}) pwrite(r0, &(0x7f0000000080)="fbaf8a8d1ad8d49dc44a8a96e821", 0xe, 0x0, 0x0) r1 = socket(0x2, 0xc003, 0x2f) setsockopt(r1, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000080)=@file={0x90177ed105bf02c4, './file0\x00'}, 0x10, 0x0}, 0x0) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000240)="8ee697135f0010b292ddbbebabed729aa3c41ab68be98c64d4ea57d2410294c912370943e660ec9d195697bcb9bd113acbe98dde4afc6026b28152884d7ab69542cd7a89cb125a421dc34f0624c4e4e022896deab96cc1fbea99837c722e1b7203264c953bd69d08f4f11674be75e72e46d545d85fc8268c7a389c1133d723e020f53c133acd6dd3a5b46cf8b2442da6a0b0", 0x92}, {&(0x7f0000000380)="2c100331f7a00bedf82ec976eeeac914435accb85c7791034123857307e40b8bb12f1d0a1f676e4a441d440ef6cae1262b321f6c41f9450a46eb3e8a517d4398f3489396f118933f9b86411edc09e6b665a2325ba8e9ed3890954f2105a4dd699c99e227dd0bf87075a2f695bc1712713c4a4a1e14aafaeda1a3b31bd2feae2c155dd491953306d45d22e12f23c89054af6037f55ad50e289678eb61067fcaf0a526ce8f0f1ccfabccb29236cafbfe621467b76caf0c55fe5b287e7b726608f720eed81eb62e09ed352e133065bc08196df310204369453aa18e9f06abb8f9e1b787d997254edaf34249104cc6b1a8d4", 0xf0}, {&(0x7f0000000480)="42853751c01fd5d767c718bc523ce0d06a684bbcbe830ad497fde8bce518c7f56048ad921a290eafdccc040b4be97bb81b69363a4fc19cfcdcfd896983ac75cd85235a", 0x43}, {&(0x7f0000000500)="2c3c84b0d05ce23ecda10b5fd3a610d40bcca23c00221d2251f5942252490a31760def692aac8b47100f29e23665744916c1d0d8a0dc4c6760be9bcf30da8655b929b110e1931bbbbe75745c482994a1f5807e7a1210c2ecd2956e5a40c857eba88f1712ac327a0cad7d7dca2ae819f9c2ea3ba847674cc934b3e09d4b29b9522dbff6710c38c5207f458f5ae370cdd5eeb7641286c60907d380b6daa1d9f760cfd2d84b1b47f1a6d2c7fa7815aa48ce6aa1d60fee9f59cd55", 0xb9}, {&(0x7f0000000140)="e20897057c15fadaa5fca4348e6fc4950d85cc76b518a5e250e3ceac7ffe94ba6f6f80a2642c5e05e8a229a614b1", 0x2e}, {&(0x7f0000000300)}], 0x6, 0x0, 0x100000001) chroot(&(0x7f0000000340)='.\x00') readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000640)=""/239, 0xef) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='..') 06:52:45 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x74}, {0x7}, {0x7ffffffe}]}) syz_emit_ethernet(0x61, &(0x7f0000000000)="b6") 06:52:45 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0xa93, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff], [0x1, 0x0, 0x0, 0x9, 0xf9ffffffffffffff], [0x0, 0x0, 0x5], [], {0x0, 0x0, 0x40000000}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$WSDISPLAYIO_GVIDEO(r1, 0x40045744, &(0x7f0000000000)) r2 = socket(0x2, 0xc003, 0x2f) setsockopt(r2, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r2, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="c402432f66696c253000"], 0x10, 0x0}, 0x0) read(r2, &(0x7f0000000040)=""/227, 0xe3) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) 06:52:45 executing program 1: r0 = socket(0x2, 0x8001, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000040)=0x200000, 0x4) getegid() connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) shutdown(r0, 0x1) 06:52:45 executing program 0: r0 = semget$private(0x0, 0x9, 0x42) semop(r0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}, {0x3, 0xb, 0x1800}, {0x0, 0x8001}, {0x2, 0x0, 0x1000}], 0x4) semop(r0, &(0x7f0000000180)=[{0x2, 0x0, 0x1000}, {0x0, 0x101, 0x3000}, {0x2, 0x6, 0x61a93e394bccb40}, {0x3, 0x400, 0x1000}], 0x4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)="510fc3a0", 0x4) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) ioctl$WSDISPLAYIO_SETSCREEN(r1, 0x80045756, &(0x7f00000002c0)=0x6) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCGBLEN(r2, 0x40044266, &(0x7f0000000180)) ioctl$TIOCGETD(0xffffffffffffffff, 0x4004741a, &(0x7f0000000200)) pipe(&(0x7f0000000600)) r3 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x0, &(0x7f0000000300)}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bpf\x00', 0x201, 0x0) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x80}, {0x5}, {0x6, 0x0, 0x0, 0x401}]}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) write(r4, &(0x7f0000000100)="3c9ebbd555feff969613ba3e1fd0", 0xe) r5 = socket(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TIOCFLUSH(r6, 0xc0106924, &(0x7f00000000c0)=0xee) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x11, 0x3, 0x0) socket(0x800000018, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$TIOCFLUSH(0xffffffffffffffff, 0x81206919, &(0x7f0000000300)) socket(0x18, 0x2, 0x8) 06:52:45 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) r1 = open$dir(&(0x7f0000000280)='./file1\x00', 0x40000400000002c2, 0x0) ftruncate(r1, 0x0, 0x69a88df4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80, 0x0) ioctl$TIOCSETVERAUTH(r2, 0x8004741c, &(0x7f0000000080)=0x10000) r3 = socket(0x2, 0xc003, 0x2f) setsockopt(r3, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r3, &(0x7f0000000540)={&(0x7f0000000080)=@file={0x90177ed105bf02c4, './file0\x00'}, 0x10, 0x0}, 0x0) preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x873) ftruncate(r0, 0x0, 0x20000a) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00') 06:52:45 executing program 1: open$dir(&(0x7f0000000100)='\x00', 0x0, 0x0) r0 = getpgrp() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xffae) setregid(0x0, r2) geteuid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x410, r0) setgroups(0x0, 0x0) r3 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r3) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x1334, r3) 06:52:45 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x5b) setreuid(0xee00, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xffae) chown(&(0x7f00000001c0)='./file0\x00', 0x0, r1) r2 = socket(0x18, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) chmod(&(0x7f0000000200)='./file0/file0\x00', 0x2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) ioctl$WSDISPLAYIO_GETSCREENTYPE(r3, 0xc028575d, &(0x7f0000000140)={0x3, 0x7, './file0\x00', 0x5, 0xa3, 0x7, 0x80}) r4 = socket(0x2, 0xc003, 0x2f) setsockopt(r4, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r4, &(0x7f0000000540)={&(0x7f0000000080)=@file={0x90177ed105bf02c4, './file0\x00'}, 0x10, 0x0}, 0x0) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', r4, 0x2}) r5 = getuid() r6 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000180), 0xc) setreuid(0xee00, r5) unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100)='x\x00') 06:52:46 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x1ff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="09917b2f1d25d3e5e3df3765279232c01f1eb7dfe6000f0008", 0x19) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) 06:52:46 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xbffffdffffffffff, 0x7ff], [0x0, 0x0, 0x401], [{}, {0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) r0 = socket(0x2, 0xc003, 0x2f) setsockopt(r0, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4022e2f66696c7479bb7f911bbbebe665300041a3d409b1a97486ef17976c3aacc5f3f5e5e70fc6c56f1fb90be1180a2e96201e3606ff98c3d5815a6da84a3d5e2feb40b87f7ef8b8ebbd5cf496142dd9e0be41e9f5736612ddb766994b34ca2834dbe7997ca7e9ba5715bb524ac828537d8c6fe29e869dd32f4d1b2758d6eac0146fa4e86a366b434537a69c75c84d04d5830708bb81eb41"], 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/196, 0xc4}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000140)=""/164, 0xa4}], 0x3, 0x0, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) chdir(&(0x7f00000004c0)='./file0\x00') 06:52:46 executing program 1: r0 = socket(0x2, 0x8001, 0x0) fcntl$setstatus(r0, 0x4, 0x84) bind$inet6(r0, &(0x7f0000000040)={0x18, 0x2, 0x4, 0x3}, 0xc) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x89, 0x4) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) 06:52:46 executing program 0: recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x832f1f7d, 0x0, &(0x7f0000000000)=@abs, 0x20000000) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000002000/0x2000)=nil) r1 = shmget(0x2, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0x4) r2 = shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) shmat(r2, &(0x7f0000001000/0x2000)=nil, 0x0) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000002040)=""/4096) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r3, 0x0, 0x0) shmctl$IPC_SET(r3, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000040)=""/210) r4 = shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) shmat(r4, &(0x7f0000001000/0x2000)=nil, 0x0) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000002040)=""/4096) r5 = shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) shmat(r5, &(0x7f0000001000/0x2000)=nil, 0x0) shmctl$SHM_LOCK(r5, 0x3) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 06:52:46 executing program 1: r0 = socket(0x2, 0xc003, 0x2f) setsockopt(r0, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000080)=@file={0x90177ed105bf02c4, './file0\x00'}, 0x10, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000280)=""/210, 0xd2, 0x800, &(0x7f0000000080)={0x18, 0x2, 0x628, 0x1000}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0) connect$unix(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="02c4009bda2e7db83f39d5498ad360ae0f57e11be8ec85b5accca88917e20fc594015b2474c8262f16da55d21a37604eb898c200000000010000009bda1c263b1371cbdb2685fe139760c64ab477ae0104000000000000766bbb01bd5856b4936eef3f545566dcf723162b2073eceb51a5c5b95e677aa46a86b51a66a96e3f1954d2871e618310755a79c2ce240ac46de181c8e0f7d291b31c401bd0e9ea4433f25ef9a6169bd198ab6c7d43165ff0b1f724e8e4b981fbc677cfad2f3b02d4d0f1434164f5ebf47ad9b7b71719f630aacbb90d"], 0xa) sendmsg$unix(r2, &(0x7f0000000400)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="28000000ffff00000100000000000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r2], 0x28}, 0x0) 06:52:46 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0xa, &(0x7f0000000180)=[{0x6570, 0x3f, 0x20, 0x2}, {0x3ff, 0x54, 0x2, 0x8}, {0x6, 0xf8, 0x4, 0xfffffff9}, {0x1, 0x91, 0x81, 0x4}, {0x5, 0x5, 0x7f}, {0x9, 0x0, 0x98, 0x6}, {0x8, 0x3, 0x2, 0xffffffef}, {0x6, 0xff, 0x7, 0x1}, {0xbb8c, 0x6, 0x8, 0x6}, {0xfffe, 0x8, 0x4, 0x1}]}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000002c0)={0x3, &(0x7f0000000040)=[{0x7c}, {0x81}, {0x6, 0x0, 0x0, 0x40400009}]}) pwrite(r0, &(0x7f0000000140)="f781ea80e21bb6f576c45af84a28", 0xe, 0x0, 0x0) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000000)=0x7ff) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000200)={0x3}) 06:52:46 executing program 1: mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x86128) writev(0xffffffffffffffff, &(0x7f0000002a00)=[{&(0x7f0000000440), 0xff52}], 0x1) r0 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000140)=[{{r0}}], 0x0, 0x0, 0x0, 0x0) close(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="fa1204a49155ce1e00", 0x9}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140), 0x8}], 0x28d, 0x0, 0x0) r2 = socket(0x2, 0xc003, 0x2f) setsockopt(r2, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r2, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4d7b2fc28696c653000"], 0x10, 0x0}, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x2, 0x0, 0x7) 06:52:46 executing program 0: r0 = socket(0x2, 0xc003, 0x2f) setsockopt(r0, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000080)=@file={0x90177ed105bf02c4, './file0\x00'}, 0x10, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x80) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x50}, {0x3d}, {0x6}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) r2 = syz_open_pts() fcntl$lock(r2, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000}) flock(r2, 0x2) fcntl$lock(r2, 0x10000000000009, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000300000000}) fcntl$lock(r2, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000}) r3 = socket(0x2, 0xc003, 0x2f) setsockopt(r3, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r3, &(0x7f0000000540)={&(0x7f0000000080)=@file={0x90177ed105bf02c4, './file0\x00'}, 0x10, 0x0}, 0x0) readv(r3, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000100)=""/87, 0x57}, {&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/35, 0x23}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000001580)=""/119, 0x77}], 0x9) ioctl$TIOCMBIS(r2, 0x8004746c, &(0x7f0000000040)=0x100000) syz_emit_ethernet(0xe, &(0x7f0000000280)="fd612da02cdffc3279adffed84dd") 06:52:46 executing program 1: select(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x8006}, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{}]}) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) close(r2) socket(0x400000000018, 0x3, 0x3a) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) ioctl$WSDISPLAYIO_LSFONT(r3, 0xc058574e, &(0x7f0000000180)) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, &(0x7f0000000000)="ebff98cbff13b9fd812e00"/20, 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r2, &(0x7f0000000040)="100a2956b9223776", 0x21d) 06:52:47 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x20, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) r2 = socket(0x18, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) renameat(r1, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file1\x00') 06:52:47 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e5], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xfff7ffeffffffffe], [0x0, 0x0, 0x401]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmm\x00', 0x80, 0x0) write(r0, &(0x7f0000000040)="c8f2c83228663e20ae59ec716bdf42046ec4e42872ff37e6c8e2a3a18212734f52247dd698633d998036ada28455e38b47c25ca2d785887f9687073a6307c0", 0x3f) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) 06:52:47 executing program 1: mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x86139) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0x0, 0x0, 0x40, 0x0, 0x400018fffffffffd}], 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)="510fc3a0", 0x4) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) dup(r0) 06:52:47 executing program 0: r0 = syz_open_pts() close(r0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) r1 = syz_open_pts() close(r1) syz_open_pts() r2 = kqueue() kevent(r2, &(0x7f0000000080), 0x400000009130dbf, &(0x7f00000000c0), 0xdde, 0x0) ioctl$TIOCSETA(r1, 0x80047470, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) ioctl$TIOCSETA(r0, 0x80047460, &(0x7f00000004c0)={0x5, 0x10001, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) readv(r0, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/176, 0x1}], 0x31e) 06:52:47 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x85) r0 = socket(0x2, 0x10000000000003, 0x1) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8202f3ffffffffffffff"], 0x10) r1 = socket(0x2, 0xc003, 0x2f) getppid() setsockopt(r1, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000080)=@file={0x90177ed105bf02c4, './file0\x00'}, 0x10, 0x0}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="106bdc47d9f3d9e4", 0xfffffffffffffd3d, 0x1, 0x0, 0x0) 06:52:47 executing program 0: ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "b800"}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200000000000008d742c009880309905f87c8a5b6701000000000000000000c414000000290000002a0000000000fb09ffffffffffdf893f3c105760e857acb057b425246054340796c48e7398d788641454efe69b534d424ac2656c964a2a0729c083e08fc2aabf999bc2e241adde0ddfc26fcdc9749a926f33eddb5713b21e721ba1b0b9f6bde94c5666615bccfa789b46724ca83cad07e886a85fa14e4c622b20b81707a701cd21b7a9ca55d46e689e00986b54ec3cef8d4ffaed2ff537a01e6b42c10cef114d9d4f58fbf75beefcf0c3400d38f67ca39e5ea666c5d0d4885d83a3fe72cdb420"], 0x38}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x400000002, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x20, 0x4, 0x4) r1 = msgget$private(0x0, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/228}, 0xec, 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000000000c5647a122df247a7572e000000db1fae2e77dfb0c0263ac371f5000000b9000000be64000000"], 0x21, 0x1000) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$VMM_IOC_TERM(r2, 0x80045604, &(0x7f0000000380)={0x4}) msgrcv(r1, &(0x7f0000000240)={0x0, ""/230}, 0xee, 0x1, 0x1800) 06:52:47 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x302, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) r1 = dup2(0xffffffffffffffff, r0) ioctl$BIOCGFILDROP(r1, 0x40044278, &(0x7f00000001c0)) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bpf\x00', 0x80, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x24}, {0x81}, {0x7ffffffe}]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f00000002c0)=[{0x0, 0x6, 0x3f, 0xffa3}, {0x7ff, 0xf9, 0x4, 0x80}]}) r4 = syz_open_pts() fcntl$lock(r4, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000}) flock(r4, 0x2) fcntl$lock(r4, 0x10000000000009, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000300000000}) fcntl$lock(r4, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000}) ioctl$TIOCNXCL(r4, 0x2000740e) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x3d}, {0x7f}, {0x6, 0x5, 0xfc, 0x100}]}) pwrite(r0, &(0x7f0000000200)="077789a95506533d030000000008", 0xe, 0x0, 0x1) fchdir(0xffffffffffffffff) 06:52:48 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') execve(0x0, &(0x7f0000000180)=[&(0x7f0000000100)='/\x00\x00'], 0x0) rmdir(&(0x7f0000000140)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0xc003, 0x2f) setsockopt(r0, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4024d2f62696c653000"], 0x10, 0x0}, 0x0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='c\x00') r1 = dup2(r0, 0xffffffffffffff9c) fchmod(r1, 0x2) r2 = socket(0x2, 0xc003, 0x2f) setsockopt(r2, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r2, &(0x7f0000000540)={&(0x7f0000000080)=@file={0x90177ed105bf02c4, './file0\x00'}, 0xa, 0x0}, 0x4) connect(r2, &(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0xa) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='r\x00') 06:52:48 executing program 0: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts() close(r0) shmget(0x0, 0x4000, 0x81d5b2d0e1f6d37e, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_pts() syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3ff, 0x7fffffff, "73f300076000"}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000007c0)="1a2eeea85f965e1c7cf20e2da943349f13b97f9c2c18705ca7", 0x19}], 0x1) 06:52:48 executing program 1: mknod(&(0x7f0000000100)='./file0\x00', 0x100002000, 0x0) r0 = syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000}) flock(r0, 0x2) fcntl$lock(r0, 0x10000000000009, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000300000000}) fcntl$lock(r0, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000}) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000080)={0x7, 0xe941, 0x5, 0x3f}) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c6, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000)="cb", 0xfe21}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="9e", 0x1}], 0x1) r2 = socket(0x2, 0xc003, 0x2f) setsockopt(r2, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r2, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="c4022e7d0b342f66696c651000db200849b9cd24facffb232fe983e0713ced1b6e0ae7e7b636d86c876e9dfbf5f88f4cbe5cdfdecc7da3f13e3afe0e48b8c6e0d02acc0062ecc82f7506a1f49e64507c4b51e73b33fb1990e6a414a079be3e9993b48a5ec6ab352f"], 0x10, 0x0}, 0x0) r3 = accept$inet6(r2, &(0x7f0000000140), &(0x7f00000001c0)=0xc) pwrite(r3, &(0x7f0000000200)="22b7823bcbf28315255eca6dfd6e56e30be0b1d7c13947422b1ae121b1fb8174cb922c8613f8b71f622e0325934e2f7018f76424744eeb62e133ca59946d8788b2a2cc078b19826a273ea4748aa8fd1431ed6a23be896784ab1ac8b4bfd711fe6175aea4dd", 0x65, 0x0, 0x7fff) 06:52:48 executing program 0: socket(0x11, 0x4003, 0x0) r0 = socket(0x2, 0xc003, 0x2f) setsockopt(r0, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) sendmsg$unix(r2, &(0x7f0000000540)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x0}, 0x8, 0x0}, 0x0) write(r1, &(0x7f0000000100)="cb46719272a24288f8177fb9c68e732ab67e34503dbe6ab2a2625c1e69", 0x1d) sendto$unix(r0, &(0x7f0000000000)="b10005016000009005001b0011000000050004fecea11ea8fef96ecfc73fd3357a05000000acf00b7804bec8df5fdd2b297be1aa5b23ed0016c8b2ca3ebbc257699a1f132e27ac2000000000000000a8af63ff37282118e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90ffcbed079b270000001257aea8c5000000020000001f0000020208a371a3f8000400000000000000010000000000000000", 0xab, 0x0, 0x0, 0x0) 06:52:48 executing program 0: madvise(&(0x7f0000763000/0x1000)=nil, 0x1000, 0x8df20591e990f8a5) 06:52:48 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCFLUSH(r0, 0x8080691a, &(0x7f0000000300)) ioctl$KDGKBMODE(r0, 0x40044b06) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000040)={0x10, 0x0, 0x4, 0x0, [{&(0x7f0000d91000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f000004a000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000320000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f00007a8000/0x3000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000a0a000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f00003bc000/0x4000)=nil}, {&(0x7f0000aec000/0x4000)=nil, &(0x7f0000acd000/0x3000)=nil}, {&(0x7f0000c0e000/0x3000)=nil, &(0x7f0000c5e000/0x3000)=nil}, {&(0x7f00000fa000/0x4000)=nil, &(0x7f0000dad000/0x4000)=nil}, {&(0x7f0000637000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil}, {&(0x7f00000cb000/0x3000)=nil, &(0x7f0000e13000/0x1000)=nil}], ['./file1\x00', './file0\x00', './file0\x00', './file0\x00'], './file0\x00', './file0\x00', './file0\x00', ['./file', './file', './file', './file']}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) socket(0x400000000018, 0x3, 0x4) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x3, 0x85) r4 = socket(0x18, 0x3, 0x0) setsockopt(r4, 0x800000000029, 0x27, &(0x7f0000000040)="1f12fb36", 0x4) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r3, 0x0, 0x0) 06:52:49 executing program 1: setuid(0xee01) r0 = semget$private(0x0, 0x4, 0x0) r1 = getuid() setreuid(0xee00, r1) chown(&(0x7f0000000040)='.\x00', r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xfffffffffffffd13) setregid(0xffffffffffffffff, r3) r4 = socket(0x2, 0xc003, 0x2f) setsockopt(r4, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r4, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4022e4a66ff4e03000000000000f984"], 0x10, 0x0}, 0x0) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r6 = getegid() r7 = getuid() setreuid(0xee00, r7) dup2(0xffffffffffffffff, 0xffffffffffffffff) chown(&(0x7f0000000040)='.\x00', r7, 0x0) r8 = getuid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x66, r8, r3, r5, r6, 0x10, 0x9}, 0x5, 0xc8b, 0x7}) socket$inet6(0x18, 0x3, 0x102) 06:52:49 executing program 0: r0 = socket(0x2, 0x10000000000003, 0x0) close(r0) socket(0x2, 0xc003, 0x2f) r1 = accept(r0, &(0x7f0000000000)=@in6, &(0x7f0000000040)=0xc) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f0000000100)=0xc) connect$unix(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8202ddffdbffffffffd3e9795bb72f2b"], 0x10) r2 = dup(r0) writev(r2, &(0x7f0000000180)=[{0x0}], 0x1) login: A?./file0 !A?@ ./file0 ";%^mnV 9GB+!t˒,b.%N/pd$tNb3Ymj'>t1j#gȴau.} 4/file I$#/q<n 6lnL\}>:H*b/udP|KQ;3y>^ƫ5/panic: pool_cache_item_magic_check: mbufpl cpu free list modified: item addr 0xfffffd806d8a5200+16 0x0!=0x631ae8a4383b2c7c Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 148768 78798 0 0x2 0 0 syz-executor.0 *371730 43206 0 0x12 0 1 sshd db_enter() at db_enter+0x18 panic(ffffffff821effeb) at panic+0x15c pool_cache_get(ffffffff8263ce28) at pool_cache_get+0x323 pool_get(ffffffff8263ce28,2) at pool_get+0x91 m_copym(fffffd806f2d8300,0,3e4,2) at m_copym+0x174 tcp_output(ffff800000a06540) at tcp_output+0x15ba tcp_usrreq(fffffd806eb8aaf8,9,fffffd806f2d8300,0,0,ffff800020ad09d0) at tcp_usrreq+0xa55 sosend(fffffd806eb8aaf8,0,ffff800020a8dae8,0,0,80) at sosend+0x671 dofilewritev(ffff800020ad09d0,4,ffff800020a8dae8,0,ffff800020a8dbd0) at dofilewritev+0x1b6 sys_write(ffff800020ad09d0,ffff800020a8db80,ffff800020a8dbd0) at sys_write+0x83 syscall(ffff800020a8dc50) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffdfc70, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic pool_cache_item_magic_check: mbufpl cpu free list modified: item addr 0xfffffd806d8a5200+16 0x0!=0x631ae8a4383b2c7c ddb{1}> trace db_enter() at db_enter+0x18 panic(ffffffff821effeb) at panic+0x15c pool_cache_get(ffffffff8263ce28) at pool_cache_get+0x323 pool_get(ffffffff8263ce28,2) at pool_get+0x91 m_copym(fffffd806f2d8300,0,3e4,2) at m_copym+0x174 tcp_output(ffff800000a06540) at tcp_output+0x15ba tcp_usrreq(fffffd806eb8aaf8,9,fffffd806f2d8300,0,0,ffff800020ad09d0) at tcp_usrreq+0xa55 sosend(fffffd806eb8aaf8,0,ffff800020a8dae8,0,0,80) at sosend+0x671 dofilewritev(ffff800020ad09d0,4,ffff800020a8dae8,0,ffff800020a8dbd0) at dofilewritev+0x1b6 sys_write(ffff800020ad09d0,ffff800020a8db80,ffff800020a8dbd0) at sys_write+0x83 syscall(ffff800020a8dc50) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffdfc70, count: -12 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800020a8d480 rbx 0xffff800020a8d530 rdx 0xffff800020ad09d0 rcx 0 rax 0 r8 0xffffffff819e607f kprintf+0x16f r9 0x1 r10 0x25 r11 0x8e619765fd0eadea r12 0x3000000008 r13 0xffff800020a8d490 r14 0x100 r15 0x1 rip 0xffffffff81e7b4f8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800020a8d470 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (sshd) pid=371730 stat=onproc flags process=12 proc=0 pri=24, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff800020ad04f0,0xffff800020ad1d60 process=0xffff800020ac8f18 user=0xffff800020a88000, vmspace=0xfffffd806e9bba18 estcpu=0, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 67496 277050 78798 0 2 0 syz-executor.0 9 383366 29443 0 2 0x2 syz-executor.1 78798 148768 29443 0 7 0x2 syz-executor.0 29443 305027 50212 0 2 0x2 syz-fuzzer 29443 46904 50212 0 3 0x4000082 nanosleep syz-fuzzer 29443 125841 50212 0 3 0x4000082 thrsleep syz-fuzzer 29443 260333 50212 0 3 0x4000082 thrsleep syz-fuzzer 29443 100999 50212 0 3 0x4000082 thrsleep syz-fuzzer 29443 86830 50212 0 2 0x4000002 syz-fuzzer 29443 349576 50212 0 3 0x4000082 thrsleep syz-fuzzer 29443 318408 50212 0 3 0x4000082 thrsleep syz-fuzzer 29443 328387 50212 0 3 0x4000082 thrsleep syz-fuzzer 29443 115445 50212 0 3 0x4000082 thrsleep syz-fuzzer 50212 503398 43206 0 3 0x10008a pause ksh *43206 371730 97560 0 7 0x12 sshd 21826 168536 1 0 3 0x100083 ttyin getty 97560 418236 1 0 3 0x80 select sshd 7397 28202 14892 74 3 0x100092 bpf pflogd 14892 84944 1 0 3 0x80 netio pflogd 39192 425559 62970 73 3 0x100090 kqread syslogd 62970 227280 1 0 3 0x100082 netio syslogd 12027 288640 1 77 3 0x100090 poll dhclient 29889 396540 1 0 3 0x80 poll dhclient 58138 13694 0 0 3 0x14200 bored smr 66739 502342 0 0 2 0x14200 zerothread 64412 508352 0 0 3 0x14200 aiodoned aiodoned 82507 495647 0 0 3 0x14200 syncer update 47724 366277 0 0 3 0x14200 cleaner cleaner 58993 294419 0 0 3 0x14200 reaper reaper 46050 400990 0 0 3 0x14200 pgdaemon pagedaemon 65513 146795 0 0 3 0x14200 bored crynlk 9797 181295 0 0 3 0x14200 bored crypto 75429 329705 0 0 3 0x40014200 acpi0 acpi0 178 170758 0 0 3 0x40014200 idle1 57207 176863 0 0 3 0x14200 bored softnet 6549 409360 0 0 3 0x14200 bored systqmp 40748 48135 0 0 3 0x14200 bored systq 48100 430561 0 0 3 0x40014200 bored softclock 81198 224865 0 0 3 0x40014200 idle0 1 395237 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 78798 (syz-executor.0) thread 0xffff800020a6c008 (148768) exclusive rwlock kmmaplk r = 0 (0xffffffff82634f58) #0 witness_lock+0x52e #1 rw_enter+0x453 #2 vm_map_lock_ln+0x111 #3 uvm_map+0x2d0 #4 uvm_km_kmemalloc_pla+0x11d #5 uvm_uarea_alloc+0x51 #6 fork1+0x271 #7 syscall+0x4a4 #8 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 1 (0xffffffff826354d8) #0 witness_lock+0x52e #1 syscall+0x400 #2 Xsyscall+0x128 Process 43206 (sshd) thread 0xffff800020ad09d0 (371730) exclusive rwlock netlock r = 0 (0xffffffff824ed1b8) #0 witness_lock+0x52e #1 solock+0x5a #2 sosend+0x559 #3 dofilewritev+0x1b6 #4 sys_write+0x83 #5 syscall+0x4a4 #6 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9487 6404K 6791K 78643K 10669 0 pcb 13 8K 8K 78643K 37 0 rtable 108 4K 4K 78643K 210 0 ifaddr 55 12K 12K 78643K 65 0 counters 43 33K 34K 78643K 45 0 ioctlops 0 0K 4K 78643K 1471 0 iov 0 0K 16K 78643K 15 0 mount 1 1K 1K 78643K 1 0 vnodes 1224 77K 77K 78643K 1252 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 3 0 VM map 2 1K 1K 78643K 2 0 sem 7 0K 0K 78643K 8 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 196K 290K 78643K 12766 0 file desc 5 13K 25K 78643K 81 0 proc 61 63K 95K 78643K 456 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 6 0 in_multi 40 2K 2K 78643K 47 0 ether_multi 1 0K 0K 78643K 4 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 37 175K 175K 78643K 37 0 exec 0 0K 1K 78643K 211 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 93 21K 21K 78643K 1159 0 UVM aobj 13 2K 2K 78643K 13 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 4 0 NDP 8 0K 0K 78643K 13 0 temp 78 3016K 3080K 78643K 2313 0 kqueue 3 4K 4K 78643K 3 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 23 0 21 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 47 0 37 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 520 0 520 1 0 1 1 0 8 1 tcpcb 544 38 0 34 1 0 1 1 0 8 0 inpcb 280 136 0 129 2 0 2 2 0 8 1 nd6 48 6 0 0 1 0 1 1 0 8 0 ppxss 1128 1 0 1 1 0 1 1 0 8 1 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 23 0 0 1 0 1 1 0 8 0 pfstkey 112 23 0 0 1 0 1 1 0 8 0 pfstate 328 23 0 0 2 0 2 2 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 188 0 0 12 0 12 12 0 8 0 art_table 32 189 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 2 1 0 1 1 0 8 1 semupl 112 3 0 3 1 0 1 1 0 8 1 semapl 112 6 0 1 1 0 1 1 0 8 0 shmpl 112 11 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1501 0 94 46 0 46 46 0 8 0 ffsino 272 1501 0 94 95 0 95 95 0 8 0 nchpl 144 1802 0 186 61 0 61 61 0 8 0 uvmvnodes 72 1565 0 0 29 0 29 29 0 8 0 vnodes 208 1565 0 0 83 0 83 83 0 8 0 namei 1024 4701 0 4701 1 0 1 1 0 8 1 percpumem 16 33 0 1 1 0 1 1 0 8 0 scxspl 192 5282 0 5282 2 1 1 2 0 8 1 plimitpl 152 23 0 15 1 0 1 1 0 8 0 sigapl 424 296 0 265 4 0 4 4 0 8 0 futexpl 56 914 0 914 1 0 1 1 0 8 1 knotepl 112 53 0 34 1 0 1 1 0 8 0 kqueuepl 144 6 0 4 1 0 1 1 0 8 0 pipelkpl 48 92 0 82 1 0 1 1 0 8 0 pipepl 120 184 0 165 1 0 1 1 0 8 0 fdescpl 496 281 0 265 3 0 3 3 0 8 0 filepl 152 1495 0 1395 5 0 5 5 0 8 1 lockfpl 104 54 0 53 1 0 1 1 0 8 0 lockfspl 48 14 0 13 1 0 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 18 0 7 1 0 1 1 0 8 0 ucredpl 96 118 0 109 1 0 1 1 0 8 0 zombiepl 144 265 0 265 1 0 1 1 0 8 1 processpl 960 296 0 265 5 0 5 5 0 8 0 procpl 624 415 0 375 4 0 4 4 0 8 0 sockpl 400 211 0 192 4 0 4 4 0 8 2 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 171 0 0 21 0 21 21 0 8 0 mtagpl 80 7 0 0 1 0 1 1 0 8 0 mbufpl 256 191 0 0 12 0 12 12 0 8 0 mbufpl: pool(0xffffffff8263ce28:mbufpl): free list modified: page 0xfffffd8068c16000; item ordinal 4; addr 0xfffffd8068c16900 (p 0xfffffd806cc46000); offset 0x0=0x0 pool(mbufpl): free list modified: page 0xfffffd8068c16000; item ordinal 4; addr 0xfffffd8068c16900 (p 0xfffffd806cc46000); offset 0x0=0x0 mbufpl: pool(0xffffffff8263ce28:mbufpl): page inconsistency: page 0xfffffd8068c16000; item ordinal 5; addr 0xfa904652ab4c1cd bufpl 280 4195 0 174 288 0 288 288 0 8 0 anonpl 16 38422 0 25726 52 1 51 51 0 124 0 amapchunkpl 152 1291 0 1158 7 0 7 7 0 158 1 amappl16 192 1015 0 338 34 0 34 34 0 8 0 amappl15 184 1 0 0 1 0 1 1 0 8 0 amappl14 176 6 0 4 2 1 1 1 0 8 0 amappl13 168 47 0 45 1 0 1 1 0 8 0 amappl12 160 32 0 31 2 1 1 1 0 8 0 amappl11 152 71 0 53 1 0 1 1 0 8 0 amappl10 144 23 0 18 1 0 1 1 0 8 0 amappl9 136 388 0 385 1 0 1 1 0 8 0 amappl8 128 310 0 293 1 0 1 1 0 8 0 amappl7 120 117 0 106 1 0 1 1 0 8 0 amappl6 112 23 0 20 1 0 1 1 0 8 0 amappl5 104 179 0 164 1 0 1 1 0 8 0 amappl4 96 516 0 488 1 0 1 1 0 8 0 amappl3 88 108 0 100 1 0 1 1 0 8 0 amappl2 80 1328 0 1266 3 1 2 3 0 8 0 amappl1 72 16149 0 15727 25 12 13 20 0 8 3 amappl 80 667 0 625 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 12 0 0 1 0 1 1 0 8 0 uaddrrnd 24 281 0 265 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 281 0 265 1 0 1 1 0 8 0 vmmpekpl 168 6145 0 6116 2 0 2 2 0 8 0 vmmpepl 168 40916 0 39150 100 3 97 97 0 357 17 vmsppl 368 280 0 265 2 0 2 2 0 8 0 pdppl 4096 570 0 530 6 0 6 6 0 8 0 pvpl 32 139878 0 124136 128 0 128 128 0 265 1 pmappl 232 280 0 265 2 0 2 2 0 8 1 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 168 0 3 5 0 5 5 0 8 0