last executing test programs: 27.060693ms ago: executing program 6 (id=7): open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) getitimer(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) 22.593033ms ago: executing program 0 (id=1): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) stat(&(0x7f0000000080)='./file2\x00', &(0x7f0000000180)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000503000004000000000105000e00331c01040100008000000000ff0100007ae302fffe4e3039d2d236acf20b7810be38164991f7c8cf5f881029ffffff7fda0000510100ad090000006c0000009b672f4d335c223e7d0c032bfa896443a42102000000720fc18bfbb670c1f5a8b67114d66e2ec589040000000000800078e36b361b1257aea8063076000000000000000004bfba353e537e2ba37f50b609f4f707e37183f834371205d1a7f1c057aa", 0xb1, 0x804, 0x0, 0x39) ioctl$DIOCNATLOOK(r0, 0xc0504417, &(0x7f0000000440)={@v6=@loopback, @v6=@ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @v4=@remote={0xac, 0x14, 0x0}, @v6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xe4, 0x7, 0x81, 0x9d3, 0x1, 0x0, 0x18, 0x7f, 0x3}) ioctl$DIOCGETRULE(r0, 0xcd604407, &(0x7f0000000540)={0x8, 0xa27b, 0x591, './file0\x00', './file2/file0\x00', 0x0, "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"}) mkdir(&(0x7f0000000500)='./file0\x00', 0x1) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc0) rename(&(0x7f0000000100)='./file2/file0\x00', &(0x7f0000000140)='./file0\x00') 8.900147ms ago: executing program 2 (id=3): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, 0x1, 0x7, 0x10001, 0x4, 0x703c72be, 0x8}) (async) kevent(r0, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffff9, 0x20, 0x8, 0xfe, 0xc}], 0x3, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffffe, 0xc8, 0x8, 0x8000000000000000, 0x5}, {{r0}, 0xfffffffffffffff6, 0x4c, 0xf0000000, 0x9, 0x40}], 0x0, &(0x7f0000000200)={0x1, 0xc}) (async) ioctl$DIOCGETSTATES(r0, 0xc0104419, &(0x7f0000000680)={0x4, &(0x7f0000000240)=[{0x0, ""/16, [{[@v4=@rand_addr, @v4=@local]}, {[@v6=@mcast2, @v6=@loopback]}], {}, {}, @v6}, {0x0, ""/16, [{[@v4=@multicast1, @v4=@multicast2]}, {[@v6=@mcast2, @v4=@rand_addr]}], {}, {}, @v6=@local}, {0x0, ""/16, [{[@v4=@multicast2, @v4=@multicast1]}, {[@v6=@local, @v4=@broadcast]}], {}, {}, @v4=@loopback}, {0x0, ""/16, [{[@v4=@multicast1]}, {[@v4=@local, @v6=@loopback]}], {}, {}, @v6=@remote}]}) (async) r1 = socket(0x1, 0x8000, 0x7f) r2 = accept$inet(r1, &(0x7f00000006c0), &(0x7f0000000700)=0x10) fcntl$setstatus(r2, 0x4, 0x80) (async) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0) ioctl$TIOCSCTTY(r3, 0x20007461) (async) sysctl$kern(&(0x7f0000000780)={0x1, 0x45}, 0x2, &(0x7f00000007c0)="a7c7075cb8b9baba01d06be1ad12f633aa8cb0d3c02812d34e971c2673bb87a3a8dd2976c344c70fe1770253", &(0x7f0000000800)=0x2c, &(0x7f0000000840)="a0fdc094cbe3014184e10bb3d1d13ad09319f8d83e4025ecb0fb2e87b2afc93da2d4af3e74023ac279e0f13800ef4c2a60acb0ebdfbfa35002600795cae75970415e6f195199fae8fa67097a75e03107edb5c77c31c8e967", 0x58) (async) close(r1) (async) r4 = setsid() (async) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) fcntl$getown(r5, 0x5) (async) recvmmsg(r6, &(0x7f0000000e40)={{&(0x7f0000000900)=@in6, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/169, 0xa9}, {&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000ac0)=""/221, 0xdd}, {&(0x7f0000000bc0)=""/72, 0x48}, {&(0x7f0000000c40)=""/65, 0x41}, {&(0x7f0000000cc0)=""/11, 0xb}], 0x6, &(0x7f0000000d80)=""/189, 0xbd}, 0x6d}, 0x38, 0x3000, &(0x7f0000000e80)={0xc, 0xad}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000ec0), 0x80, 0x0) (async) socket$inet(0x2, 0x4006, 0xf) (async) ioctl$TIOCGETD(r6, 0x4004741a, &(0x7f0000000f00)) (async) listen(r2, 0x5) (async) connect$inet(r2, &(0x7f0000000f40)={0x10, 0x2, 0x1, 0x6}, 0x10) (async) ioctl$AUDIO_GETPAR(r6, 0x40404124, &(0x7f0000000f80)) (async) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000fc0)) (async) ktrace(&(0x7f0000001000)='./file0/file0\x00', 0x4, 0x40000802, r4) fcntl$getown(r1, 0x5) (async) write$audio(r5, &(0x7f0000001040)="3e2be01a481ecc7fa48d340878e135c6f3baedc3d7089a52cb71881f30d50897deaff9af806eca8b2c2c444b6c1fb53e3b98a9e363c23a5b0651b2dc20dca3a6fdda477860ef8d62d96de89575b16e9120c690717fb9fa565403b075522a93db31b6562c734a897c0bbf8e9db51b9660a06bfaf2664d19f30ba60e8d479a93ebee4d297a5e58ffda88c90b3c55e7a83258b6ddc2798202d3c54cf513fd448997f7fcd2014ca82366cee2ca0d1428765dd308e20aec6c7fff58b201fd9f03f35a67bc3f2f6c3ab239e47e07de99240840f4956ab8ae4efa08465cbb446bcce577a41e604c666388b40a6d11ff1656ae", 0xef) (async) writev(r1, &(0x7f0000001340)=[{&(0x7f0000001140)="bf56590df9111977b411f0c71a3cfa25b3ad2af178ee59fb3957cd6ff1b794b529cc1486960bf023df9d653a24e2c97e9fee5930d897f3168ae8406b5e333200349ce6062400be4077b0999735e4e4c0db0bbe86ad94c766897f49e3cb3019f3ee31f3749dc93f6746a94082ee", 0x6d}, {&(0x7f00000011c0)="71ede40d5ea99a7379b97f5805ec49c20cf6a4c4c7e4d3", 0x17}, {&(0x7f0000001200)="91cd3d14a63722d35046c12a8537a6b0bb1c5e6017ba9fa55bd146b1bd3a0844dea88417b938540cde089ed452b00cbc580ee2e41cdaf7db6e55862c5601a751eb5a67ab8c5a99ea19445a17b94efe5a69c5e81337ce9831e0cfdafecc5453b1c62313752a0d1f608bc87810ba39a5afe67f2507c0fef3164d61209a365b80062f9bbddf0d1b0f6d59de3b95e1ea038699c3fa27b12fa47f30c05b8f202d8fc42ce60b7f5a0469892365f1866b256ee75f1e993e78e2de5e015270064d1f0b1fb6815cb2fab01b01700c6ea086477d8f0298ef85e85375ca4ae966c7dde6", 0xde}, {&(0x7f0000001300)="d617d4a9fb28b425ae6161a148029874b20a0e966e2009cb93070e2a083d04e6ac9d5159", 0x24}], 0x4) (async) ioctl$DIOCRCLRTSTATS(r5, 0xc4504441, &(0x7f0000002000)={{'./file0\x00', './file0/file0\x00', 0x9, 0x9}, &(0x7f0000001380)=[{'./file0/file0\x00', './file0\x00', 0x20, 0x9}, {'./file0\x00', './file0/file0\x00', 0x33, 0x4}, {'./file0/file0\x00', './file0/file0\x00', 0x0, 0x8}], 0x2515, 0x3, 0x8, 0x7, 0x5, 0x1ff, 0x8}) (async) ioctl$WSDISPLAYIO_SETPARAM(0xffffffffffffffff, 0xc020575a, &(0x7f0000002480)={0x2, 0x3, 0x8, 0x5}) (async) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000024c0)={0xf, 0x40, 0x1, 0x1, "d187be92e01fb907750e6a1e88183b596e561cd5", 0xd, 0x1}) (async) pread(r6, &(0x7f0000002500)="bbb9528580e567d29994d38c365d7a3aa32bfb25b4f17e7044dfd0518d065e50563d2cebc0467bd019c763d9118e994f7ebf559f14f50eec555a1e", 0x3b, 0x5) 8.248346ms ago: executing program 3 (id=4): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x2fffc, 0x4b6b, 0xfff6, 0x21d8b788, "2707a460990d000009000000fff7ff00", 0x89, 0x869}) syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xe) r2 = socket$inet(0x18, 0x3, 0x102) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="638802000000339afe51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426ee03e", 0x6}, {&(0x7f0000000680)="a2", 0xfdac}], 0x2, 0x0}, 0x402) 3.836507ms ago: executing program 5 (id=6): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000040)={0x80000000, 0xfff, 0xffffffffffffff9c}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) futimens(r1, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x54, 0x80, 0x1, 0x2}, {0x40, 0x9, 0x7, 0x9}, {0x9b1e, 0x2, 0x0, 0xd}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x3, 0xa, 0x10, [{0x10001004, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe8, 0x1000002, 0x2}, {0x4000cd5, 0x4baa, 0x4, 0x4}, {0x7, 0x100000ff, 0xf, 0x88ce}, {0x4, 0x200000a, 0x1, 0x10}, {0x388d, 0xfffffffb, 0x85, 0x5}, {0x10000, 0xa00, 0x20003, 0xffffffff}, {0x207, 0xfffffffd, 0x5}, {0x7, 0x1000, 0x7, 0x7ffd}, {0x8003, 0xfffffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff4}, {0x2, 0xfffffffe, 0x0, 0xa68}, {0x401, 0xc, 0x400809, 0xa5}, {0x6, 0x6, 0x102, 0x4}, {0x2, 0x0, 0x81, 0x7}, {0x89be2, 0x1, 0x2, 0x400}]}) r2 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) ioctl$VNDIOCGET(r3, 0xc4104603, &(0x7f0000000080)={'./file0\x00', 0x0, 0x1, 0x6}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x4b84) r4 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x7, 0x1, 0x2}, {0x3, 0x29, 0x8, 0xfffffff9}, {0x101, 0x5, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x800f, 0x7}, {0x7, 0xffff, 0x2800, 0x7}, {0xffffffff, 0x4, 0x3, 0x9b}, {0xce1, 0xfffffeff, 0x4d4, 0x6}, {0x1000006, 0x18, 0x14, 0x10}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ce, 0x800, 0xdaa1, 0x7}, {0xc, 0xa, 0x1}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0xfffffffa, 0x205, 0x4}, {0x0, 0x1, 0x1ff, 0x230003}]}) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[]) ioctl$DIOCADDQUEUE(r0, 0xc148445d, &(0x7f0000000180)={0xae5, 0x347, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0xfffffffffffffff5, 0xb}, {0x5, 0x8}, 0x4}, {{0x1, 0x7}, {0x6, 0x37}, 0x3}, {{0xda5f, 0x3}, {0x5bb, 0xd}, 0x1}, {0x8df2, 0xfff, 0x10, 0x3}, 0x0, 0x5, 0x6, 0x5, 0x1}}) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2812, r5, 0x0) fstatat(r5, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r8, 0x0, 0x0) lchown(&(0x7f0000000500)='./file0\x00', r6, r8) r9 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x2) write(r9, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) chflagsat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) 3.324318ms ago: executing program 1 (id=2): r0 = socket(0x18, 0x1, 0x0) r1 = syz_open_pts() ppoll(&(0x7f0000000040)=[{r1, 0xe5}], 0x1, 0x0, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x1, 0x3fe, 0xa96d, 0x1, '\x00\x00\x00*h\x00', 0x10042, 0x7ff}) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x505, "296449fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) kqueue() getsockopt(r0, 0x6, 0x2, 0x0, 0x0) 0s ago: executing program 7 (id=8): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0) r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x5c, 0x9, 0x7, 0x4}, {0x9b1e, 0x7f, 0xc, 0x400}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) poll(&(0x7f0000000140)=[{r0, 0x54}, {r1, 0x1a7}], 0x2, 0x524) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)=@in={0x10, 0x2, 0x3, 0x9}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="63880200007987d1e1d8c44d9270aeec15fe51f6f2efa24a85abdd612dc06f02d5253669e54c00b390a3d34885fc10c02315e60841a380948fe85c7164370918a72debfebc3ae6f65aab0c278c850ad8a5839be6dd0f520d57", 0x59}, {&(0x7f0000000300)="a20631f7fa869b80eecf31062f916d1863db75a38682fed4e6f6be137274bfd280d7467f1178b8c44a9b08653d300c5b2073282c7afc2a9cfc97a28a4a820707d89704717498cbf19007c202c91db7efaaeec9d1434e6f4b08bd3b1756580d5c8b900249916208c3c344a8fd7595d6def124eb6e18840c64551e35608b404990a94252bcf2e55c1fc5a39369d29ff1ac006349212039055b583b7f1d86ee56ac3cc8ba381e19fd2478c53f3c3f2cf9f0bc6e5df0aa270196d9fb8e90d72314740000", 0xc2}, {&(0x7f0000000000)="0601c42b37e12e2f861d72ab2950f9c30d92c96907db1675cdf970467d2a79", 0x1f}], 0x3, 0x0}, 0x6) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-main-2.us-central1-c.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. login: uvm_fault(0xfffff4006d195740, 0x70, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dovutimens+0x368: movl 0x70(%rax),%r12d TID PID UID PRFLAGS PFLAGS CPU COMMAND *498380 11107 0 0 0x4000000 0 syz-executor dovutimens(ffff80003c8fa7e8,fffff4006c013ca8,ffff80003c907de0) at dovutimens+0x368 sys_futimens(ffff80003c8fa7e8,ffff80003c907f20,ffff80003c907e70) at sys_futimens+0xb3 syscall(ffff80003c907f20) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xaee772cc990, count: 11 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffff4006d195740, 0x70, 0, 1) -> e ddb> show kasan No such command ddb> trace dovutimens(ffff80003c8fa7e8,fffff4006c013ca8,ffff80003c907de0) at dovutimens+0x368 sys_futimens(ffff80003c8fa7e8,ffff80003c907f20,ffff80003c907e70) at sys_futimens+0xb3 syscall(ffff80003c907f20) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xaee772cc990, count: -4 ddb> show registers rdi 0xffff8000380ca000 rsi 0x3e rbp 0xffff80003c907dd0 rbx 0xfffffffffffffffe rdx 0xffff8000380ca000 rcx 0x3d rax 0 r8 0xffffffff825bf380 uvm_map_inentry_sp r9 0 r10 0 r11 0xf8de592cdeed3380 r12 0xffff80003c907de0 r13 0x33ab4067 r14 0xfffff4006c013ca8 r15 0xffff80003c8fa7e8 rip 0xffffffff81b99c18 dovutimens+0x368 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c907cd0 ss 0x10 dovutimens+0x368: movl 0x70(%rax),%r12d ddb> show proc PROC (syz-executor) tid=498380 pid=11107 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=51, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a766540,0xffff80003c8fb788 process=0xffff800045ff9218 user=0xffff80003c902000, vmspace=0xfffff4006d195740 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 11107 138130 29546 0 2 0 0 syz-executor *11107 498380 29546 0 7 0 0x4000000 syz-executor 70180 216737 39520 0 2 0 0 syz-executor 70180 361187 39520 0 3 0 0x4000080 fsleep syz-executor 64905 510482 70050 0 2 0 0 syz-executor 64905 247386 70050 0 3 0 0x4000080 fsleep syz-executor 11764 484094 73862 0 2 0 0 syz-executor 11764 121328 73862 0 3 0 0x4000080 fsleep syz-executor 47746 69739 15572 0 2 0 0 syz-executor 47746 405245 15572 0 3 0 0x4000080 fsleep syz-executor 48367 328660 20697 0 2 0x2 0 ndp 20697 291775 1772 0 3 0x100002 0x88 sigsusp sh 70050 44235 4694 0 3 0x2 0x80 nanoslp syz-executor 39520 55744 4694 0 3 0x2 0x80 nanoslp syz-executor 29546 297791 4694 0 3 0x2 0x80 nanoslp syz-executor 1772 289764 4694 0 3 0x2 0x80 wait syz-executor 42701 446721 4694 0 2 0x2 0 syz-executor 15572 181408 4694 0 3 0x2 0x80 nanoslp syz-executor 73862 204934 4694 0 3 0x2 0x80 nanoslp syz-executor 7270 315581 4694 0 2 0x2 0 syz-executor 4694 49521 35521 0 3 0x2 0x80 kqread syz-executor 35521 507767 89885 0 3 0x100002 0x88 sigsusp ksh 89885 222473 51565 0 3 0x10 0x88 kqread sshd-session 51565 500625 11962 0 3 0x12 0x80 kqread sshd-session 8704 374729 1 0 3 0x100003 0x80 ttyin getty 11962 258679 1 0 3 0 0x88 kqread sshd 1875 185090 8312 73 3 0x1100010 0x80 kqread syslogd 8312 431815 1 0 3 0x100002 0x80 sbwait syslogd 20139 259984 1 0 3 0x100000 0x80 kqread resolvd 9136 428763 55971 77 3 0x100012 0x80 kqread dhcpleased 20640 398813 55971 77 3 0x100012 0x80 kqread dhcpleased 55971 397822 1 0 3 0 0x80 kqread dhcpleased 58874 460304 0 0 3 0x14000 0x200 bored smr 11589 49187 0 0 2 0x14000 0x200 zerothread 84110 409652 0 0 3 0x14000 0x200 aiodoned aiodoned 52132 133411 0 0 3 0x14000 0x200 syncer update 69216 451177 0 0 3 0x14000 0x200 cleaner cleaner 20770 307627 0 0 3 0x14000 0x200 reaper reaper 80081 43568 0 0 3 0x14000 0x200 pgdaemon pagedaemon 64523 63123 0 0 3 0x14000 0x200 bored viomb 73953 112474 0 0 3 0x14000 0x40000200 acpi0 acpi0 22472 274605 0 0 3 0x14000 0x200 bored softnet0 55347 434066 0 0 3 0x14000 0x200 bored systqmp 5177 157062 0 0 3 0x14000 0x200 bored systq 33223 89438 0 0 3 0x14000 0x40000200 tmoslp softclock 25310 366672 0 0 3 0x14000 0x40000200 idle0 1 105877 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11032 12167K 12167K 166960K 12116 0 pcb 17 12K 12K 166960K 18 0 rtable 235 6K 6K 166960K 348 0 pf 30 12K 12K 166960K 30 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 33 17K 17K 166960K 33 0 ioctlops 0 0K 4K 166960K 30 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1290 81K 81K 166960K 1356 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 17 61K 97K 166960K 137 0 proc 57 58K 124K 166960K 495 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 6K 6K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 365 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 203 151K 160K 166960K 2957 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 38 76K 96K 166960K 1236 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 27 2K 2K 166960K 27 0 temp 34 9106K 9112K 166960K 3604 0 kqueue 14 22K 22K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 36 0 33 1 0 1 1 0 8 0 rtentry 136 110 0 1 4 0 4 4 0 8 0 unpcb 144 37 0 22 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 9 0 4 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 inpcb 328 61 0 53 2 0 2 2 0 8 1 nd6 112 23 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 110 0 11 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1557 0 96 92 0 92 92 0 8 0 ffsino 256 1557 0 96 92 0 92 92 0 8 0 nchpl 144 1755 0 60 63 0 63 63 0 8 0 vnodes 216 1641 0 0 92 0 92 92 0 8 0 namei 1024 5156 0 5156 2 0 2 2 0 8 2 kstatmem 264 23 0 0 2 0 2 2 0 8 0 scxspl 216 5898 0 5898 3 0 3 3 1 8 3 plimitpl 152 29 0 12 1 0 1 1 0 8 0 sigapl 424 432 0 390 6 0 6 6 0 8 0 knotepl 120 2635 0 2585 2 0 2 2 0 8 0 kqueuepl 184 23 0 13 1 0 1 1 0 8 0 pipepl 304 122 0 95 3 0 3 3 0 8 0 fdescpl 448 419 0 390 5 0 5 5 0 8 0 filepl 120 1438 0 1228 7 0 7 7 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 23 0 15 1 0 1 1 0 8 0 pgrppl 48 31 0 15 1 0 1 1 0 8 0 ucredpl 104 86 0 75 1 0 1 1 0 8 0 zombiepl 144 390 0 390 1 0 1 1 0 8 1 processpl 1152 432 0 390 4 0 4 4 0 8 0 procpl 664 439 0 392 5 0 5 5 0 8 0 sockpl 552 134 0 108 3 0 3 3 0 8 1 mcl64k 65536 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2493 0 2441 14 0 14 14 0 8 6 mcl2k 2048 113 0 112 1 0 1 1 0 8 0 mextrefs 64 33 0 32 1 0 1 1 0 8 0 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 4130 0 4000 10 0 10 10 0 8 1 bufpl 272 2221 0 102 142 0 142 142 0 8 0 anonpl 24 77410 0 74454 20 0 20 20 0 187 0 amapchunkpl 152 7761 0 7340 19 0 19 19 0 158 0 amappl16 200 1077 0 1063 4 0 4 4 0 8 3 amappl15 192 2 0 2 1 0 1 1 0 8 1 amappl14 184 410 0 408 1 0 1 1 0 8 0 amappl13 176 112 0 102 1 0 1 1 0 8 0 amappl12 168 651 0 624 2 0 2 2 0 8 0 amappl11 160 73 0 73 1 0 1 1 0 8 1 amappl10 152 57 0 47 1 0 1 1 0 8 0 amappl9 144 270 0 269 1 0 1 1 0 8 0 amappl8 136 92 0 91 1 0 1 1 0 8 0 amappl7 128 215 0 203 1 0 1 1 0 8 0 amappl6 120 151 0 149 1 0 1 1 0 8 0 amappl5 112 92 0 85 1 0 1 1 0 8 0 amappl4 104 260 0 245 1 0 1 1 0 8 0 amappl3 96 1349 0 1267 3 0 3 3 0 8 0 amappl2 88 534 0 467 2 0 2 2 0 8 0 amappl1 80 10057 0 9507 13 0 13 13 0 8 0 amappl 88 2272 0 2133 4 0 4 4 0 92 0 uvmvnodes 80 95 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 419 0 390 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 419 0 390 1 0 1 1 0 8 0 vmmpekpl 168 5369 0 5333 2 0 2 2 0 8 0 vmmpepl 168 35759 0 34086 78 0 78 78 0 357 0 vmsppl 368 418 0 390 4 0 4 4 0 8 0 rwobjpl 40 13330 0 12418 11 0 11 11 0 8 0 pdppl 4096 844 0 780 100 18 82 82 0 8 18 pvpl 32 196467 0 188529 68 0 68 68 0 265 1 pmappl 216 418 0 390 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 502 0 18 14 0 14 14 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace dovutimens(ffff80003c8fa7e8,fffff4006c013ca8,ffff80003c907de0) at dovutimens+0x368 sys_futimens(ffff80003c8fa7e8,ffff80003c907f20,ffff80003c907e70) at sys_futimens+0xb3 syscall(ffff80003c907f20) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xaee772cc990, count: -4 ddb> machine ddbcpu 1 No such command ddb> trace dovutimens(ffff80003c8fa7e8,fffff4006c013ca8,ffff80003c907de0) at dovutimens+0x368 sys_futimens(ffff80003c8fa7e8,ffff80003c907f20,ffff80003c907e70) at sys_futimens+0xb3 syscall(ffff80003c907f20) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xaee772cc990, count: -4