last executing test programs: 929.225967ms ago: executing program 0 (id=1): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) bind$unix(0xffffffffffffff9c, &(0x7f0000000200)=@abs={0x7, 0x0, 0x0, 0x0}, 0x8) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x10) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0}) write(r0, 0x0, 0x0) chflags(&(0x7f0000000180)='./file0\x00', 0x10000) unveil(0x0, &(0x7f0000000080)='c\x00') r2 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000080)={0x3, 0xffffffff, 0xffffffc0, 0x8623, "0100012d29fb000700000000098002005e00"}) writev(r2, &(0x7f0000001d40)=[{&(0x7f0000000800)="fe6b480557b8450b4c7fc68b754c97f70e652d9a3654d5aab676dd6c4b48a2b1f341ba0288c91cd7451cea2440f88ec9768e4dd6fd4c39b03ba84abbfefa55d3a51af705b291f418bc9642aceea42ea11dc05a47b4cc447198a286aaef1a1902cca07f09", 0x64}], 0x1) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)="2fd435c49cf236ea01edb0d2078768a0f1a746103ad748499fbf2f63357b8e470faac9c938375838bb7fb9118f4efbe0cd52125668ca0fce00f6238f93c77bc2b09b3251df3154cc1d7852b3e8d3e3f225a3966d2c370c9872e82b796b9f280c5dffca86be41cbe26316307c1f1aaa42aec4a1c9980ad7e39969665bde5b47ae02af2906de462847395adbf7cfcc4ae73ee3", 0x92}], 0x1) ioctl$DIOCNATLOOK(r3, 0xc0884450, &(0x7f0000000080)={@v6=@mcast1, @v6=@ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x1, 0x5, 0x10, 0x43, 0x7, 0x8, 0x2, 0x9b, 0x2}) 926.758742ms ago: executing program 1 (id=2): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80146952, &(0x7f00000001c0)) munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) ioctl$DIOCGETSTATUS(r0, 0xc2084415, &(0x7f0000000140)) 925.458128ms ago: executing program 2 (id=3): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$hw(&(0x7f0000000000)={0x6, 0xc}, 0x2, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 916.127925ms ago: executing program 3 (id=4): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xfffffeff}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x40d}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0xffffffd8}, {0x2, 0x2}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x1}, {0x0, 0x20}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x91}, {0x1, 0x1}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x800}, {0x1}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x3, 0x8001}, {0x1, 0x200060}]}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket(0x18, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1) (async) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x1}, 0x2, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x409}, 0x0) (async) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x1}, 0x2, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x409}, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1}, {0x3}, {0x0, 0x300}, {0x3}, {0x3, 0x4000}, {0x2, 0xf}, {}, {0x3, 0x1000001}, {}, {0x4}, {0x1}, {0x1}, {0x1, 0x9}, {0x1, 0x100000}, {0x2}, {}, {0x3, 0x4}, {0x1, 0x1000}, {0x1}, {}, {0xb3b787630a3b27cc}, {0x0, 0x5}, {0x2, 0xfffffffe}, {0x2}, {0x0, 0x2000}, {0x0, 0x7ff}, {0x0, 0x1}, {0x0, 0x10000}, {0x2, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}, {0x1}]}) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1}, {0x3}, {0x0, 0x300}, {0x3}, {0x3, 0x4000}, {0x2, 0xf}, {}, {0x3, 0x1000001}, {}, {0x4}, {0x1}, {0x1}, {0x1, 0x9}, {0x1, 0x100000}, {0x2}, {}, {0x3, 0x4}, {0x1, 0x1000}, {0x1}, {}, {0xb3b787630a3b27cc}, {0x0, 0x5}, {0x2, 0xfffffffe}, {0x2}, {0x0, 0x2000}, {0x0, 0x7ff}, {0x0, 0x1}, {0x0, 0x10000}, {0x2, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}, {0x1}]}) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0xc0307006, &(0x7f0000000080)={0x1, 0x10}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000080)="02", 0x1) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000080)="02", 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VMM_IOC_CREATE(r2, 0xca605601, &(0x7f0000000080)={0x10, 0x9, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x400}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffffff822d}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x10, 0x2}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f000002b000/0x2000)=nil, 0x3}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffffffffff89}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000280000/0x1000)=nil, 0x7, 0x1}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4, 0x1}, {&(0x7f00004aa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f000032c000/0x2000)=nil, 0x800762c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f000050c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2007ffffffb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xffffffff}], './bus\x00', 0xe0ad, 0x9}) ioctl$DIOCRGETASTATS(r0, 0xc4504447, &(0x7f0000000600)={{'./file1\x00', './bus\x00', 0x2, 0xa6}, 0x0, 0xa0, 0x0, 0x5, 0xe, 0x7, 0x9, 0x34, 0xce6}) ioctl$DIOCSETSYNCOOKIES(r0, 0xc0014462, &(0x7f0000000380)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) r3 = getpgid(0x0) fcntl$lock(r0, 0x9, &(0x7f0000000f00)={0x7ff, 0x0, r3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x2e}, 0x2, &(0x7f0000000180)="7fbfc6c01aa3149a9786ab228a2f6647e0c9049d1554c19355e2abff4890414a5b7a860d63c67d8733e15a5d70842bbeae6a15df243f4206f148dc710703e320be56913d0ded39e55b2aef5be263", &(0x7f0000000200)=0x4e, &(0x7f0000000240)="2acbfcb59fb84cbc2cfbd8c6ae1560ac9f9859c67c438f0aeeffd39593c20b2ae1622ec808552e188d24801acdd77cdc33bcaa0fd8851b61c6ad5f28f9f60bb079e6c54c4e4c56b62761bd6b9ca958389c5f900c0060482999ef42a451e45020fc0fbb3c0994a45254af26ef8a97fd455d99f7e43d62b9dc14fc2500e74eb53296ea04ae80af9ef2cf1a9391102cd357128eb9945a198d9400e4a348f1", 0x9d) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x2e}, 0x2, &(0x7f0000000180)="7fbfc6c01aa3149a9786ab228a2f6647e0c9049d1554c19355e2abff4890414a5b7a860d63c67d8733e15a5d70842bbeae6a15df243f4206f148dc710703e320be56913d0ded39e55b2aef5be263", &(0x7f0000000200)=0x4e, &(0x7f0000000240)="2acbfcb59fb84cbc2cfbd8c6ae1560ac9f9859c67c438f0aeeffd39593c20b2ae1622ec808552e188d24801acdd77cdc33bcaa0fd8851b61c6ad5f28f9f60bb079e6c54c4e4c56b62761bd6b9ca958389c5f900c0060482999ef42a451e45020fc0fbb3c0994a45254af26ef8a97fd455d99f7e43d62b9dc14fc2500e74eb53296ea04ae80af9ef2cf1a9391102cd357128eb9945a198d9400e4a348f1", 0x9d) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) mprotect(&(0x7f00006ca000/0x2000)=nil, 0x2000, 0x4) (async) mprotect(&(0x7f00006ca000/0x2000)=nil, 0x2000, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000300)={0x935, 0x12, r0}) ioctl$DIOCRSETADDRS(r4, 0xc4504445, &(0x7f0000000a80)={{'./file1\x00', './bus\x00', 0x51, 0x3}, &(0x7f0000000340)=[{@loopback, '\x00', './file0\x00', 0x8, 0x0, 0x18, 0x6, 0x5, 0x81, 0x5}], 0x7, 0x1, 0x9f5, 0x1000, 0x4, 0xa, 0x4, 0x3}) 914.408273ms ago: executing program 4 (id=5): syz_open_pts() r0 = socket(0x2, 0x1, 0x0) kqueue() ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xfffffff9, 0x3, 0x6, 0x1, 0x3, 0x22, 0x80000000, 0x1, 0x3, 0x1, 0x200000000000000c}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) open(&(0x7f0000000800)='./file1\x00', 0x8000, 0x2b) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) closefrom(r0) 911.745314ms ago: executing program 5 (id=6): syz_open_pts() syz_open_pts() r0 = syz_open_pts() ioctl$TIOCSCTTY(r0, 0x20007461) syz_open_pts() r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) accept$inet(r1, 0x0, &(0x7f0000000000)) 591.339774ms ago: executing program 2 (id=9): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500008bafcd0eca0cdd53fafd3493776665f6cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x400) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x8, 0x0) ioctl$TIOCSETA(r0, 0xc4504446, &(0x7f0000000740)={0x1ff, 0x3, 0x2, 0x5, "97a2224fd5c14649ebb178926cc9795a6b47c1cf", 0x8000, 0x1000}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000800), 0x10000, 0x0) sysctl$vm_swapencrypt(&(0x7f00000002c0)={0x6, 0xb, 0x578400a4bcb6ab61}, 0x3, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffdaf) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGBLEN(r1, 0x4010427e, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000580)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCGHDRCMPLT(r1, 0x40044274, &(0x7f0000000000)) 589.070018ms ago: executing program 1 (id=10): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) (async) setgid(0xffffffffffffffff) (async) r1 = getegid() r2 = getgid() setresgid(0x0, r2, r1) setregid(r1, 0x0) (async) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) (async) r3 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) (async) setresgid(r2, r1, r2) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) r4 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000100)=0xffffff67) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000c40)={0x1000, 0x9, 0x4000002, 0x2, 0x1000009, 0x4, 0x0, 0x10, [{0x8001, 0xc, 0xab9, 0x10000}, {0x7f, 0x7e4, 0x7f, 0x3}, {0x9, 0x3, 0x2, 0x8}, {0x1, 0x40000000, 0x9, 0x4}, {0x3, 0xfffffff8, 0x4dd3, 0x7fffffff}, {0xfff, 0x81, 0x92}, {0x5, 0x9, 0x6, 0xfffffffe}, {0x9, 0x0, 0xd4d, 0xfc}, {0x5, 0x8000ecc, 0x2c277a63, 0xdac}, {0x25, 0x10000, 0x4c, 0x20002}, {0x8, 0x8, 0x5, 0x36c}, {0x3, 0xe, 0x0, 0x5}, {0x8, 0x7, 0x8, 0x70d80}, {0x2, 0x40, 0x9, 0x8}, {0xa, 0x400, 0x397, 0xc}, {0x6, 0x7, 0xd}]}) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (rerun: 32) poll(&(0x7f0000001c00)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1}], 0x2, 0x80) unveil(0x0, &(0x7f0000001dc0)='w\x00') (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0xc0285108, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0, 0x18}) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x8}) 587.772745ms ago: executing program 5 (id=11): unveil(0x0, 0x0) munmap(&(0x7f0000214000/0x1000)=nil, 0x1000) r0 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x12, "ff010000008000", 0x3}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000100)) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f0000003b00)="816a0000", 0x4) sysctl$hw(&(0x7f0000000000)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_pts() mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r2 = getpid() r3 = accept(0xffffffffffffffff, &(0x7f0000000040)=@in6, &(0x7f00000000c0)=0x1c) r4 = fcntl$dupfd(r3, 0xa, r1) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) openat(r4, &(0x7f0000000340)='./file2\x00', 0xb5219f1000b913f1, 0xa0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x6, 0x1, './file0\x00'}, 0xa) bind$unix(r5, &(0x7f00000000c0)=@abs={0x9, 0x1, 0x0, 0x1}, 0x8) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x370c, r2) setuid(0xee01) nanosleep(&(0x7f0000000100)={0xfffffffffffffffc, 0x8000000000000000}, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0xe, 0x3, 0x0, 0x3}) poll(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x8}, 0x4, 0x0, 0x0, &(0x7f0000000040), 0x0) 374.858331ms ago: executing program 6 (id=7): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DIOCXROLLBACK(r0, 0xc0104453, &(0x7f0000000000)={0x1, 0x408, &(0x7f0000000200)=[{0x1, '\x00', 0x3}]}) ioctl$DIOCCLRSTATES(r0, 0x0, &(0x7f0000000080)={{0x3, 0x80000000}, 0x2, '\x00', 0x6, {@table={'./file0\x00', 0x0, 0x3, 0xf8}, [0x9, 0x200], 0x9, 0x1, 0x4}, {@table={'./file0\x00', 0x0, 0x3, 0x7}, [0x5, 0x8], 0x3, 0x1, 0x1}, './file0\x00', './file0\x00', 0x1ff, 0xfff8}) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x40001622, r1) unveil(0x0, &(0x7f0000000180)='w\x00') 163.406565ms ago: executing program 4 (id=12): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x11bc62ce) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) r0 = open(&(0x7f0000000480)='./file0\x00', 0x200, 0x96) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000880), 0x1, 0x0) pwritev(r1, &(0x7f00000008c0)=[{&(0x7f0000000240)="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", 0x189}], 0x1, 0x5) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f0000001a80)=[{&(0x7f00000001c0)="2321201aa7", 0x5}, {&(0x7f0000000140)="8d6bb85551ec8430877ae32fe9bbe41969f0435119cf4c071c8aee7ef2921be5d7d40e6c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b090a", 0x40}], 0x2) lstat(&(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000002e40)=[0x0, 0x0]) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000002e80), 0x10000, 0x0) r5 = accept4(r0, &(0x7f0000002ec0)=@un=@file={0x0, 0x0, ""/249}, &(0x7f0000002fc0)=0xfb, 0xe000) r6 = getthrid() getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000003000)={0x0}, 0xc) r8 = open(&(0x7f0000003040)='./file0\x00', 0x2, 0x8) r9 = socket(0x18, 0x3, 0xfe) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}, {r9, 0x4}, {r9, 0x1}], 0x3, 0x4) connect(r9, &(0x7f0000000080)=@in6={0x1c, 0x18, 0x3, 0x6, "febf52abe701e9216acd72d58c40979c", 0x7}, 0x1c) r10 = getsid(0x0) lstat(&(0x7f0000003080)='./bus\x00', &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000003140)=[0x0, 0x0, 0xffffffffffffffff, 0x0]) sendmsg$unix(r0, &(0x7f0000003280)={&(0x7f0000000040)=@file={0x8, 0x0, './bus\x00'}, 0x8, &(0x7f0000002cc0)=[{&(0x7f0000000200)="159e8819e38bd6ba196294f2a356bc39c5a4f25c56491a31779d14c03e5749971d83ab3021f49b718cf0eb611f12f6fe51f0dbe88eee65ac78b0de7ced298fb215a8d1ed0330174951a0d269dd09ffcf6e12e01d33bc30c8f8b26c125efb59af62c18b21e98ec961a45cb85b5594bf168b2d48e810c2d43152fdacd2048e4f5ec361456124d1d1947ce4e34b511e", 0x8e}, {&(0x7f00000002c0)="05609467a3b7a558f91fedc4d416d432bd739da6e38ca83a132d124bb2805f5a", 0x20}, {&(0x7f0000000300)="5d2007a31ae65fa93bb8d24a8dacd17ebb7b74c410fc5230a43911243ac083490c47008652a053020ab816b7062c5df1e96ae4241cf1851ab8c40cac658123d5977e4bbdaf3bb686681a00264091200940d556ec92c753fe41b666a35260e52f082d29428b239d7451858d40cc738267c0", 0x71}, {&(0x7f0000000380)="545302865cb0d50f4d45cb3150defeddd32668eaf39a785046ff620fd32bf1983d60f81c72886fab442edd42d3c4469dca5dd3020a8fdaf5f457505c69e73ffb32eac27015dfe991de9a5b82457fafa215a1ec23189cc2d63a1022a63ceaeb7f508b126e783c4d22d5a1e8d509062451913cd05365d4", 0x76}, {&(0x7f0000000400)="0f94bcba334efce44706b983efe2d0929ae09d7bb51d03915f2ebbc71ab4541f830408a0d0dc45aca89b9f0532583b77612084c0344bc075f2a10a08f1b0cdbca12aaff5b44d9dc6a6aabf4c75a03a2e6569c802d425269f5f327f8e4c0bd4cabaac", 0x62}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="88e3513ae38cc7e4b36d20a7046756be0e4686d0dfa14e9a03e9f6261a62427eea96574809b336ad1182c32c66826689ba5a4ddfca54b5f18d5d16f658d7588438afe5ece8e76c3a60b2601e8d4f2bde062ce031b6519fa98f936fe2257484c03af31db34d6d1cdf6b70b1d404b109a0ebd62c703e0558633358d9fa6ca87a4651053f64b8af8405150b911efb40c598b9891e0adf466296e49f91195ec12e13f1f2aaf8", 0xa4}, {&(0x7f0000002b80)="83ff44f546fceec2293a5d5b1a04768325a9b8a21f2bbf562ae19d5e0e9c86ad74fee8d1163a91e8e6cf5e504c4308c6e03db1fb6b26ea35e4e5644ff6129c2162d770bda9bda59b4f30bb6d756526b0a594de7e552fe488", 0x58}, {&(0x7f0000002c00)="b4aa0243bdb39efd53354346d370872bf72eb96d20d75298713c016e6222c6df3e3c0f5fc13d99ad6b4f69472162fb2b77fc70399dc6280c2c6e93903781e97b1d9b11d18ef4f2c4cb961ebd248d76ce35f5875aeeadc6ad9d72841910cbb91f9f6e8fb10d34674bdbbff3aadafb130801866d573007b12b96dd680a701965946b7ea6b17cf2a64aacade88a78af7ae3f8ea8aedf382d0ab9708a21f23ea8e15", 0xa0}], 0x9, &(0x7f0000003180)=ANY=[@ANYBLOB="18000000ffff000000000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0c00000002ff00000100000018000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1c000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000ffff000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18000000ffff000000000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYBLOB="1c000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r0, @ANYBLOB="10000000ffff000001000000", @ANYRES32=r0, @ANYBLOB="1c000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18000000ffff000000000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12], 0xec, 0x401}, 0x8) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvfrom$unix(r13, &(0x7f00000000c0)=""/246, 0xf6, 0x1803, &(0x7f00000001c0)=@file={0x1, 0x1, './bus\x00'}, 0x8) 161.626851ms ago: executing program 3 (id=13): write(0xffffffffffffffff, &(0x7f00000000c0)="9389af2ab4d1ffd84d59ef02ccf591b28729514cf815e6c544a38332209a0410c0bd409e77392e039c305e667ce28c286812a924cf1c6779785940e784d43baa74cbb496b837", 0x46) r0 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000100)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0xee) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7c9a7, 0x0) r1 = getpid() r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) connect(r2, &(0x7f0000000000)=@in={0x10, 0x2, 0x3, 0x4a95ac25}, 0x10) r3 = socket(0x18, 0x2, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) bind(r3, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c) select(0x40, &(0x7f0000000040)={0x4, 0x4, 0x100000000, 0x1, 0xffff, 0xa446, 0x3, 0x101}, &(0x7f0000000080)={0x5, 0x8, 0x1, 0x7, 0x3, 0x9, 0x7, 0x1330d143}, &(0x7f0000000140)={0x1, 0xe, 0x9, 0x2, 0x6, 0x4, 0x2, 0x2}, &(0x7f0000000180)={0x4, 0x6}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="ff9991291065", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="fe000000020000ff80d14400002000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) execve(&(0x7f0000001180)='.\x02/file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x1, 0x1, 0x0) r5 = socket(0x2, 0x1, 0x0) sendto$inet6(r5, 0x0, 0xffffffffffffff22, 0x2, 0x0, 0x0) ioctl$FIONREAD(r4, 0x802069a1, &(0x7f00000001c0)) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) getentropy(0xfffffffffffffffe, 0x0) setrlimit(0x1, &(0x7f0000000240)={0x7, 0x1fd}) 161.220576ms ago: executing program 2 (id=14): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0xd6) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2321201aa770e043ad84a99b898d378d035cb5a35b8a9cdaa8f576ced53e3a60467224b1ab5af309", 0x28}, {&(0x7f0000000140)="8d6bb85551ec8430877ae32fe9bbe41969f0435119cf4c071c8aee7ef2921be5d7d40e6c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b090a", 0x40}], 0x2) (async) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x1000) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 31.818807ms ago: executing program 1 (id=15): openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) setrlimit(0x8, &(0x7f0000000180)={0x42, 0x465}) r1 = syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x4, 0x8, 0x7, 0x2, 0x3b, 0x3, 0x43, 0x10, [{0x3, 0x4003, 0x17fff, 0x80000204}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0x41, 0x6, 0x2}, {0x2, 0x80000000, 0xf, 0x4}, {0x3, 0x3, 0xf11, 0x7}, {0x800, 0x0, 0x8b}, {0x7, 0x5, 0x85, 0x2}, {0x2, 0xfffffffe, 0xfffffffa, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x17fff}, {0x101, 0xfffffffd, 0x5, 0x7}, {0x8, 0x8000004, 0xb36e, 0x7}, {0x6, 0xc7cb, 0x810000, 0xa66}, {0x401, 0x116, 0x6}, {0x200003, 0xee2, 0x80, 0x5}, {0x7fff, 0x6, 0x3, 0x7fff}, {0xffffffff, 0x8005, 0x6, 0x7}]}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) setrlimit(0x1, &(0x7f0000000240)={0xac, 0x1fd}) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) r2 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x518, r2) setuid(0xffffffffffffffff) setrlimit(0x8, &(0x7f0000000980)={0x0, 0x400000051}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) ioctl$TIOCSETA(r1, 0xc450444d, &(0x7f0000000740)={0x2f, 0x3, 0x40, 0x4, "97a2224ff1ebb1000000000000000000ff00", 0xfffffffc, 0xb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) chroot(&(0x7f0000000740)='.\x00') syz_open_pts() poll(&(0x7f0000000000), 0x35, 0x0) close(r1) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) rename(&(0x7f0000000480)='./file0\x00', 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb7) setuid(0xffffffffffffffff) ioctl$TIOCSFLAGS(r3, 0x8004745c, &(0x7f00000001c0)=0x7) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x182, 0xd181}, 0x4, 0x0, 0x0, 0x5, 0x0, 0x42, 0xc, 0xffffffff, 0x8000000000000000, 0xc, 0x3}) 13.105602ms ago: executing program 0 (id=16): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x3a, &(0x7f0000001340)=ANY=[@ANYBLOB="aaaaaaaaaaaa867631fea695080045f4002c006900000006909300000007ffffffff4e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600282009078fffc08710502"]) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x6, 0xa16, 0xffffffffffffffff}) linkat(r1, 0x0, r1, 0x0, 0x0) 0s ago: executing program 4 (id=17): openat$vnd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DIOCCLRSRCNODES(r0, 0x20004455) (async) ioctl$DIOCCLRSRCNODES(r0, 0x20004455) r1 = socket(0x2, 0x1, 0x0) r2 = socket(0x18, 0x2, 0x0) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000040000000000000000000001", 0x5}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) (async) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000040000000000000000000001", 0x5}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) setsockopt(r1, 0x6, 0x200, 0x0, 0x0) (async) setsockopt(r1, 0x6, 0x200, 0x0, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = socket(0x23, 0x3, 0xc9) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f00000000c0)={0x9, 0x80}) mquery(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10, r3, 0xebf) connect(r4, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x6, "1fa82beddc5f43d7b34b8ef2ffc0d260"}, 0x1c) bind$unix(r4, &(0x7f0000000080)=@abs={0xc, 0x1, 0x0, 0x0}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. uvm_fault(0xfffffd006d197180, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at sys_shmat+0x453: movq 0(%r15),%rdi TID PID UID PRFLAGS PFLAGS CPU COMMAND *259089 82358 0 0 0x4000000 0 syz-executor sys_shmat(ffff80003c9567f0,ffff80003b0d1f10,ffff80003b0d1e60) at sys_shmat+0x453 syscall(ffff80003b0d1f10) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2888abebd00, count: 12 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd006d197180, 0x0, 0, 1) -> e ddb> show kasan No such command ddb> trace sys_shmat(ffff80003c9567f0,ffff80003b0d1f10,ffff80003b0d1e60) at sys_shmat+0x453 syscall(ffff80003b0d1f10) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2888abebd00, count: -3 ddb> show registers rdi 0 rsi 0x2000 __ALIGN_SIZE+0x1000 rbp 0xffff80003b0d1e40 rbx 0xfffffd006a7eff00 rdx 0 rcx 0x1 rax 0x1 r8 0x180 r9 0xfffffd0007ffd750 r10 0 r11 0x7a7d8ef8c83db64a r12 0xffff80003c9567f0 r13 0xffff8000015f8010 r14 0x3 r15 0 rip 0xffffffff82f73c43 sys_shmat+0x453 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003b0d1db0 ss 0x10 sys_shmat+0x453: movq 0(%r15),%rdi ddb> show proc PROC (syz-executor) tid=259089 pid=82358 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=69, usrpri=69, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c9562c0,0xffff80003c9574f8 process=0xffff80003b4d9fd0 user=0xffff80003b0cc000, vmspace=0xfffffd006d197180 estcpu=19, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 71792 377348 99054 0 2 0 0 syz-executor 71792 71630 99054 0 3 0 0x4000080 fsleep syz-executor 30391 500495 5633 0 2 0 0 syz-executor 30391 65846 5633 0 2 0 0x4000000 syz-executor 56807 479584 33356 0 2 0 0 syz-executor 56807 255391 33356 0 2 0 0x4000000 syz-executor 82358 215784 38179 0 2 0 0 syz-executor *82358 259089 38179 0 7 0 0x4000000 syz-executor 2356 274604 75128 0 2 0 0 syz-executor 2356 396783 75128 0 3 0 0x4000080 fsleep syz-executor 84344 115082 78458 60929 3 0x10 0x80 nanoslp syz-executor 84344 358494 78458 60929 3 0x10 0x4000080 nanoslp syz-executor 84344 33820 78458 60929 3 0x10 0x4000080 fsleep syz-executor 75454 393165 54460 0 2 0x100000 0 sh 54460 514042 27256 0 3 0x100002 0x88 sigsusp sh 27256 122115 36135 0 3 0x2 0x80 wait syz-executor 75128 474934 36135 0 2 0x2 0xc80 syz-executor 78458 204581 36135 0 2 0x2 0xc80 syz-executor 5633 343653 36135 0 3 0x2 0x80 nanoslp syz-executor 23904 344282 36135 0 2 0x2 0 syz-executor 38179 103388 36135 0 3 0x2 0x80 nanoslp syz-executor 33356 260246 36135 0 2 0x2 0xc80 syz-executor 99054 489838 36135 0 3 0x2 0x80 nanoslp syz-executor 36135 419228 83126 0 3 0x2 0x80 kqread syz-executor 83126 201122 95241 0 3 0x100002 0x88 sigsusp ksh 95241 64614 89785 0 3 0x10 0x88 kqread sshd-session 89785 188294 18006 0 3 0x12 0x80 kqread sshd-session 12517 92996 1 0 3 0x100003 0x80 ttyin getty 18006 490125 1 0 3 0 0x88 kqread sshd 20153 366019 80265 73 3 0x1100010 0x80 kqread syslogd 80265 118153 1 0 3 0x100002 0x80 sbwait syslogd 82919 492428 1 0 3 0x100000 0x80 kqread resolvd 46405 184144 44946 77 3 0x100012 0x80 kqread dhcpleased 82468 486518 44946 77 3 0x100012 0x80 kqread dhcpleased 44946 162506 1 0 3 0 0x80 kqread dhcpleased 27063 519776 0 0 3 0x14000 0x200 bored smr 3984 336014 0 0 2 0x14000 0x200 zerothread 70925 216208 0 0 3 0x14000 0x200 aiodoned aiodoned 92912 503905 0 0 3 0x14000 0x200 syncer update 47958 420839 0 0 3 0x14000 0x200 cleaner cleaner 43170 136402 0 0 3 0x14000 0x200 reaper reaper 53753 99341 0 0 3 0x14000 0x200 pgdaemon pagedaemon 42962 506043 0 0 3 0x14000 0x200 bored viomb 77124 84317 0 0 3 0x14000 0x40000200 acpi0 acpi0 2297 26344 0 0 3 0x14000 0x200 bored softnet0 28878 370479 0 0 3 0x14000 0x200 bored systqmp 44591 238395 0 0 3 0x14000 0x200 bored systq 357 110697 0 0 2 0x14000 0x40000200 softclock 26617 466436 0 0 3 0x14000 0x40000200 idle0 1 34641 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11027 12102K 12118K 166960K 12121 0 pcb 17 12K 12K 166960K 19 0 rtable 235 6K 6K 166960K 347 0 pf 30 12K 13K 166960K 34 0 ifaddr 42 7K 7K 166960K 46 0 ifgroup 50 2K 2K 166960K 54 0 sysctl 1 1K 9K 166960K 5 0 counters 33 17K 17K 166960K 35 0 ioctlops 0 0K 6K 166960K 35 0 iov 0 0K 12K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1291 81K 81K 166960K 1368 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 97K 166960K 147 0 proc 58 59K 124K 166960K 496 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 6K 6K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 2K 166960K 367 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 208 151K 161K 166960K 3020 0 UVM aobj 3 2K 6K 166960K 5 0 pinsyscall 39 78K 96K 166960K 1244 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 15 0K 2K 166960K 29 0 temp 34 9106K 9170K 166960K 3316 0 kqueue 13 20K 22K 166960K 28 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 35 0 32 1 0 1 1 0 8 0 rtentry 136 110 0 1 4 0 4 4 0 8 0 unpcb 144 39 0 23 1 0 1 1 0 8 0 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 13 0 8 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 inpcb 328 69 0 61 2 1 1 2 0 8 0 nd6 112 23 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 110 0 11 1 0 1 1 0 8 0 shmpl 120 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1577 0 119 92 0 92 92 0 8 0 ffsino 256 1577 0 119 92 0 92 92 0 8 0 nchpl 144 1785 0 95 63 0 63 63 0 8 0 vnodes 216 1668 0 0 93 0 93 93 0 8 0 namei 1024 5958 0 5957 9 4 5 5 0 8 4 vcpupl 3968 16 0 16 2 0 2 2 0 8 2 vmpool 808 1 0 1 1 0 1 1 0 8 1 kstatmem 264 27 0 4 2 0 2 2 0 8 0 scxspl 216 6053 0 6053 3 2 1 3 1 8 1 plimitpl 152 30 0 13 1 0 1 1 0 8 0 sigapl 424 442 0 399 7 1 6 6 0 8 0 knotepl 120 3493 0 3446 9 0 9 9 0 8 7 kqueuepl 184 28 0 18 1 0 1 1 0 8 0 pipepl 304 122 0 95 3 0 3 3 0 8 0 fdescpl 448 429 0 399 5 1 4 5 0 8 0 filepl 120 1493 0 1281 7 0 7 7 0 8 0 lockfpl 104 10 0 8 1 0 1 1 0 8 0 lockfspl 48 6 0 4 1 0 1 1 0 8 0 sessionpl 144 23 0 15 1 0 1 1 0 8 0 pgrppl 48 31 0 15 1 0 1 1 0 8 0 ucredpl 104 105 0 93 1 0 1 1 0 8 0 zombiepl 144 412 0 412 1 0 1 1 0 8 1 processpl 1160 442 0 399 4 0 4 4 0 8 0 procpl 664 473 0 423 6 0 6 6 0 8 0 sockpl 552 143 0 116 4 1 3 3 0 8 1 mcl64k 65536 1 0 1 1 0 1 1 0 8 1 mcl16k 16384 1 0 1 1 0 1 1 0 8 1 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 4 0 4 1 1 0 1 0 8 0 mcl4k 4096 2501 0 2449 13 5 8 13 0 8 0 mcl2k 2048 132 0 131 2 1 1 1 0 8 0 mextrefs 64 40 0 40 2 1 1 1 0 8 1 mtagpl 96 4 0 4 1 1 0 1 0 8 0 mbufpl 256 4284 0 4129 11 0 11 11 0 8 0 bufpl 272 2240 0 102 143 0 143 143 0 8 0 anonpl 24 85075 0 82022 40 8 32 32 0 187 9 amapchunkpl 152 8238 0 7814 27 2 25 25 0 158 5 amappl16 200 1174 0 1156 5 3 2 4 0 8 0 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 408 0 406 1 0 1 1 0 8 0 amappl13 176 111 0 101 1 0 1 1 0 8 0 amappl12 168 666 0 638 2 0 2 2 0 8 0 amappl11 160 43 0 43 1 1 0 1 0 8 0 amappl10 152 62 0 52 1 0 1 1 0 8 0 amappl9 144 270 0 270 1 1 0 1 0 8 0 amappl8 136 95 0 94 1 0 1 1 0 8 0 amappl7 128 150 0 139 1 0 1 1 0 8 0 amappl6 120 175 0 173 1 0 1 1 0 8 0 amappl5 112 94 0 87 1 0 1 1 0 8 0 amappl4 104 261 0 244 1 0 1 1 0 8 0 amappl3 96 1423 0 1344 4 1 3 3 0 8 0 amappl2 88 557 0 491 2 0 2 2 0 8 0 amappl1 80 10097 0 9544 13 0 13 13 0 8 0 amappl 88 2334 0 2189 4 0 4 4 0 92 0 uvmvnodes 80 97 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 2 1 0 1 1 0 8 0 uaddrrnd 24 429 0 399 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 429 0 399 1 0 1 1 0 8 0 vmmpekpl 168 5471 0 5433 2 0 2 2 0 8 0 vmmpepl 168 36580 0 34841 82 1 81 81 0 357 1 vmsppl 368 428 0 399 4 1 3 4 0 8 0 rwobjpl 40 13605 0 12694 12 1 11 11 0 8 1 pdppl 4096 866 0 800 99 28 71 82 0 8 5 pvpl 32 208938 0 200606 106 10 96 96 0 265 14 pmappl 216 429 0 400 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 512 0 44 14 0 14 14 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace sys_shmat(ffff80003c9567f0,ffff80003b0d1f10,ffff80003b0d1e60) at sys_shmat+0x453 syscall(ffff80003b0d1f10) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2888abebd00, count: -3 ddb> machine ddbcpu 1 No such command ddb> trace sys_shmat(ffff80003c9567f0,ffff80003b0d1f10,ffff80003b0d1e60) at sys_shmat+0x453 syscall(ffff80003b0d1f10) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2888abebd00, count: -3