last executing test programs: 51.353193ms ago: executing program 0 (id=1): sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) (async) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) (async) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) r1 = syz_open_pts() writev(r1, &(0x7f0000000440)=[{&(0x7f00000001c0)="82aaa18b5b78d3ab537d70efee51d2cb230be5aeac5462e0243fd4580e2bd7f1746f26bb961922d224e93d94c7baf46f9bd24fd4d28ec85aa5c22b20bb3ea2daa3939fd377bf4acc220a7f075904a84539658c6300a1b35f2c31d502194a9e2e9da7a6a3", 0x64}], 0x1) writev(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="d6ac", 0x2}], 0x1) syz_open_pts() (async) syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x57a, 0x8, 0x4, 0x3, "f888e838e099a8d4356d8a98f6712095289dda7c", 0x3, 0x8}) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000080)=0x2) (async) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000080)=0x2) unveil(0x0, &(0x7f0000000140)='c\x00') r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x10) ftruncate(r2, 0x80002) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="2000019c0a", 0x5}], 0x1) 46.492301ms ago: executing program 3 (id=4): r0 = socket(0x18, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0xfd) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000040)="e000002700000000", 0x8) dup2(r0, r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unveil(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='c\x00') select(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x6, 0x2}, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x3, 0x0) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x2b, &(0x7f0000000000)="5ab7776a", 0x4) setsockopt(r2, 0x1000000029, 0x28, &(0x7f0000000000)="5ab7776a", 0x4) sendto(r2, &(0x7f0000001100)="79c79ea153684754b3e6b415439dd6bf38e70f9541c43f2065f501c5aadc3a7a0c4a76c00d9edb4437edd9812f4f126a8f8d13a1b26657347941756918595af3a8c2510c91e3e19f7f5e3d8724102d7d8008415f31de9cbc0720dd382c7dd55bf6cfd4b7841092d3c0e25b29d3e997d6ecaba104f523b5e53ec27af248abdd4dc117dbee154780020afe2343a1e1fb36a5067c5e01012825f112c442ff0ff0df3bc246ba7b187de04c656425f74e806a9131f615b79e8a069489db95528e87c0b7f30a5c430abd63403fb44f7f25a63b0a3e624c7c99453a675acac3", 0xdc, 0x1, &(0x7f0000000040)=@un=@abs={0x1, 0x0, 0x1}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000023c0)={@broadcast, @random="c7a2e46f05fa", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @empty, @local, @multicast1}}}}) execve(0x0, 0x0, 0x0) 44.23071ms ago: executing program 4 (id=5): setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0xfe, 0x2}, {0x0, 0x0, 0x40, 0x9}, {0x2, 0x0, 0x0, 0x85}]}) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000200)=[&(0x7f0000000300)='\x00\x80),@', &(0x7f0000000240)='\x00\x80),@', &(0x7f0000000040)='\x00\x80),@', &(0x7f00000001c0)='\x00\x80),@']) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) 35.633516ms ago: executing program 5 (id=6): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x0) (async) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VT_OPENQRY(r1, 0x40047601, &(0x7f0000000080)) (async) sendto$unix(r0, &(0x7f0000000180)="b1000504600000000000000007000000331c13fecea10500fef96ecfc72fd3357ae320a77bff0100000000000005ae04be38164991f7c8cf5f882b297be1aa5b2394cf7950f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8afa7d9f6642102410000720fd4d73f0b70c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfb70900000008e371a3f8343712051eadb71d89e000040781e4b2ffe000ff00", 0xb1, 0x0, 0x0, 0x0) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async, rerun: 32) munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) (rerun: 32) 28.685686ms ago: executing program 1 (id=2): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0x9b3, 0x0, 0x4, 0x1000, "b9dc8e7b3454cd421b9c05ae6d30e050c57d9d1f", 0xfe, 0x5e05}) sysctl$net_inet6_icmp6(&(0x7f00000000c0)={0x4, 0x18, 0x3a, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[]) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000380)={0xf66a, 0xffff, 0x3, 0xfffffb80, "9ddc412e317d3504446b576a00002f9e68cd3304", 0x6, 0x7}) writev(r3, &(0x7f0000000000)=[{&(0x7f00000009c0)="33fdd4623b69191a20b44928e7b4c4f13131bab0cc6165dec03852739eb861f043b3648ea7cd46bdad63683235798e7b3bb3e619cd15f07e707aa020314f8a14682c8ac2398d0f855735ea19f718cd16e207c3ad8531de8f23a856be3e693e7a2666f40df6151f2813d0629e3e71d8a20d73b8ea6c96acca9c5132200caebfce5b54350cacaeb181bbd27a31721e3ef8c8531a1e0ec7fa51c5868cb726db7ed48cea24540741d45d4bfdaa8476e324182f0912c989ffdad9ab471b868d97431432a5626d4686253ede2207612947f05d5afad72c35a4efaf9c5767bdbf5568bb9bfb759d3457c66d9dff5833787af074d313e62ae66c39d416a34c8634e6ff9bb77cc1a123c4f8cc4d5a2129daa172af43e3fb3e980a58c711a7644f62f00aab0080000000000000d430da7080c4ec5350d21d8a110d23afdb95f993cc46fbdca736dc34c00b10d723332d23c87ca4b631dc17c99b716c853c2ed9a491b8fe29883cb3d063a2e17fa0f90928fb7fb7c7bf29e4ee6a1fe79b51a4648fba428187c7be1854cc913b1d42776603e314e3c46fcd4f2b4280fb6181dc29", 0x19b}], 0x1) connect$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x1}, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) sysctl$net_inet6_icmp6(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$BIOCPROMISC(r0, 0x20004269) ioctl$BIOCPROMISC(r1, 0x20004269) 11.110311ms ago: executing program 2 (id=3): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x17, 0xdf60, 0xfffffffffffffffe, 0x80, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x6], [0xfffffffffffffffe, 0x80000001, 0x1, 0x20000001, 0x5e, 0x7, 0x80000000000001fe, 0x0, 0x0, 0x1], [0x100000003, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xd, 0x8], [{0x0, 0x0, 0xfffffffe, 0x8000000000007d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x9, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9, 0x100000000000000}, {0x0, 0x100, 0x1, 0x4}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x1}}}) r0 = kqueue() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0xffff, 0x2000, &(0x7f0000000080)=0x4, 0x4) sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="a1af00903afe43d72ff8687f0e8712bf0d6c9b7ca86e9472b3a14d568b87d022d5f34a07a6bd4f76670b5ccf11365027693447713aca2173e12bab783308acfa79e7bdc3e0e7efc98318d79a5c46c158392d7b9527c59c0f0810d9aeaff1934aa2ad0dde47509148a2939c4f5fc2de577abc5f89fa26e5f0c163c9360c67f83df9a07e6726e2c1aee163a69fcf", 0xfe94}, {&(0x7f0000000240)="982ed3c7", 0x4}], 0x2, &(0x7f00000002c0)=[{0x10, 0x1, 0x1}], 0x10}, 0x4) socket(0x11, 0x3, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) kevent(r0, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) (async) kevent(r0, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) 8.123791ms ago: executing program 6 (id=7): setrlimit(0x5, &(0x7f0000000000)={0x5, 0xffffffffffffffff}) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000640)={0x3, 0x0, 0x5, 0x2}) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r2 = getpid() setgroups(0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r2) setreuid(0xee00, 0x0) (async) r3 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r4, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r5 = fcntl$getown(r4, 0x5) ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0x1a2c, r5) (async) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x3, 0x11, 0x65, 0x5, '!\r\x00\x00\x00\b\x00', 0x2000000, 0x5}) 0s ago: executing program 7 (id=8): sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="b100050400000400000001010100b703005613be", 0x14, 0x0, 0x0, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="b100050400000400000001010100b703005613be", 0x14, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffff9c) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0xa) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000001c0), 0x782, 0x0) ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f0000000000)={0x240, 0x401}) flock(r0, 0x2) (async) flock(r0, 0x2) execve(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. uvm_fault(0xfffffd806ba175d0, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *316631 12884 60928 0x10 0x4000000 0 syz-executor ktrops(ffff80002a7c07e8,ffffffffffffffff,0,a0c7df9f,fffffd806a9402e8,fffffd8007bfb340) at ktrops+0x58 doktrace(fffffd806a9402e8,4,20c7df9f,0,ffff80002a7c07e8) at doktrace+0x6bd sys_ktrace(ffff80002a7c07e8,ffff80003c975ae0,ffff80003c975a30) at sys_ktrace+0x11c syscall(ffff80003c975ae0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd4cd933d6c0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806ba175d0, 0xf, 0, 1) -> e ddb> trace ktrops(ffff80002a7c07e8,ffffffffffffffff,0,a0c7df9f,fffffd806a9402e8,fffffd8007bfb340) at ktrops+0x58 doktrace(fffffd806a9402e8,4,20c7df9f,0,ffff80002a7c07e8) at doktrace+0x6bd sys_ktrace(ffff80002a7c07e8,ffff80003c975ae0,ffff80003c975a30) at sys_ktrace+0x11c syscall(ffff80003c975ae0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd4cd933d6c0, count: -5 ddb> show registers rdi 0xffff80003190a000 rsi 0x5c0 rbp 0xffff80003c975800 rbx 0xfffffd8007bfb340 rdx 0xffff80003190a000 rcx 0x5bf rax 0xffffffff82951bf3 ktrops+0x43 r8 0xfffffd806a9402e8 r9 0xfffffd8007bfb340 r10 0xea390223098fed7b r11 0xbe3894f905e94862 r12 0xffff80002a7c07e8 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0xa0c7df9f rip 0xffffffff82951c08 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c975780 ss 0 ktrops+0x58: movq 0x10(%r14),%r14 ddb> show proc PROC (syz-executor) tid=316631 pid=12884 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7c1248,0xffffffff8398eb58 process=0xffff80003a529f98 user=0xffff80003c970000, vmspace=0xfffffd806ba175d0 estcpu=2, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 12884 506652 1355 60928 2 0x10 syz-executor *12884 316631 1355 60928 7 0x4000010 syz-executor 39834 202231 96890 0 2 0 syz-executor 39834 351508 96890 0 3 0x4000080 bell syz-executor 39834 185111 96890 0 3 0x4000080 fsleep syz-executor 77728 262726 6233 0 3 0x80 nanoslp syz-executor 77728 270409 6233 0 2 0x4000000 syz-executor 77728 137284 6233 0 3 0x4000080 fsleep syz-executor 87788 320876 11895 0 2 0 syz-executor 87788 26558 11895 0 3 0x4000080 fsleep syz-executor 96890 344926 53436 0 2 0xc82 syz-executor 5122 456234 53436 0 2 0x2 syz-executor 6233 159542 53436 0 2 0xc82 syz-executor 1355 468190 53436 0 2 0xc82 syz-executor 11895 434025 53436 0 3 0x82 nanoslp syz-executor 65066 270294 53436 0 3 0x82 nanoslp syz-executor 7554 380349 53436 0 2 0x2 syz-executor 57764 14381 53436 0 2 0xc82 syz-executor 53436 505672 98787 0 3 0x82 kqread syz-executor 98787 151676 23748 0 3 0x10008a sigsusp ksh 23748 273382 88375 0 3 0x98 kqread sshd-session 88375 58847 56846 0 3 0x92 kqread sshd-session 99071 438339 1 0 3 0x100083 ttyin getty 56846 279417 1 0 3 0x88 kqread sshd 68310 179858 20493 73 3 0x1100090 kqread syslogd 20493 304216 1 0 3 0x100082 sbwait syslogd 59619 237427 1 0 3 0x100080 kqread resolvd 49667 502454 73211 77 3 0x100092 kqread dhcpleased 67904 4921 73211 77 3 0x100092 kqread dhcpleased 73211 515161 1 0 3 0x80 kqread dhcpleased 35757 424977 0 0 3 0x14200 bored smr 77553 343796 0 0 2 0x14200 zerothread 90792 303905 0 0 3 0x14200 aiodoned aiodoned 82420 179586 0 0 3 0x14200 syncer update 78180 127958 0 0 3 0x14200 cleaner cleaner 12301 289646 0 0 3 0x14200 reaper reaper 83673 390018 0 0 3 0x14200 pgdaemon pagedaemon 4317 214546 0 0 3 0x14200 bored viomb 22949 475027 0 0 3 0x40014200 acpi0 acpi0 90803 49920 0 0 3 0x14200 bored softnet0 81669 203495 0 0 3 0x14200 smrbar systqmp 93905 318614 0 0 3 0x14200 bored systq 29373 332920 0 0 3 0x40014200 tmoslp softclock 40438 126766 0 0 3 0x40014200 idle0 1 176841 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10167 11041K 11053K 166960K 11251 0 pcb 17 12K 12K 166960K 17 0 rtable 205 5K 5K 166960K 260 0 pf 30 12K 12K 166960K 30 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 32 17K 17K 166960K 32 0 ioctlops 0 0K 2K 166960K 30 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1338 84K 84K 166960K 1355 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 97K 166960K 139 0 sigio 0 0K 0K 166960K 1 0 proc 59 59K 124K 166960K 474 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 348 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 217 146K 152K 166960K 2836 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 37 74K 96K 166960K 1171 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 27 2K 2K 166960K 27 0 temp 34 8634K 8698K 166960K 3699 0 kqueue 15 22K 26K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 39 0 34 1 0 1 1 0 8 0 rtentry 136 95 0 1 4 0 4 4 0 8 0 unpcb 144 33 0 16 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 7 0 2 1 0 1 1 0 8 0 arp 96 10 0 0 1 0 1 1 0 8 0 inpcb 328 56 0 47 2 0 2 2 0 8 1 nd6 112 16 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 437 0 0 28 0 28 28 0 8 0 art_table 40 438 0 0 5 0 5 5 0 8 0 art_node 32 95 0 4 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1550 0 43 95 0 95 95 0 8 0 ffsino 256 1550 0 43 95 0 95 95 0 8 0 nchpl 144 1740 0 54 63 0 63 63 0 8 0 vnodes 216 1635 0 0 91 0 91 91 0 8 0 namei 1024 5092 0 5090 2 0 2 2 0 8 1 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 6280 0 6280 8 0 8 8 1 8 8 plimitpl 152 28 0 12 1 0 1 1 0 8 0 sigapl 424 416 0 375 6 0 6 6 0 8 1 knotepl 120 3553 0 3506 14 0 14 14 0 8 12 kqueuepl 184 20 0 10 1 0 1 1 0 8 0 pipepl 304 100 0 73 3 0 3 3 0 8 0 fdescpl 448 403 0 375 5 0 5 5 0 8 1 filepl 120 1307 0 1087 7 0 7 7 0 8 0 lockfpl 104 9 0 6 1 0 1 1 0 8 0 lockfspl 48 6 0 3 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 30 0 13 1 0 1 1 0 8 0 ucredpl 104 80 0 67 1 0 1 1 0 8 0 zombiepl 144 377 0 375 1 0 1 1 0 8 0 processpl 1152 416 0 375 4 0 4 4 0 8 0 procpl 664 429 0 382 5 0 5 5 0 8 0 sockpl 552 128 0 97 3 0 3 3 0 8 0 mcl64k 65536 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2442 0 2392 13 0 13 13 0 8 4 mcl2k 2048 149 0 145 1 0 1 1 0 8 0 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 3744 0 3609 9 0 9 9 0 8 0 bufpl 280 2914 0 117 200 0 200 200 0 8 0 anonpl 24 96424 0 93251 23 0 23 23 0 187 3 amapchunkpl 152 8024 0 7575 20 0 20 20 0 158 0 amappl16 200 1806 0 1778 5 0 5 5 0 8 3 amappl15 192 5 0 5 1 0 1 1 0 8 1 amappl14 184 109 0 99 1 0 1 1 0 8 0 amappl13 176 5 0 5 1 0 1 1 0 8 1 amappl12 168 1017 0 989 3 0 3 3 0 8 1 amappl11 160 49 0 39 1 0 1 1 0 8 0 amappl10 152 8 0 8 1 0 1 1 0 8 1 amappl9 144 250 0 250 1 0 1 1 0 8 1 amappl8 136 23 0 22 1 0 1 1 0 8 0 amappl7 128 99 0 89 1 0 1 1 0 8 0 amappl6 120 186 0 183 1 0 1 1 0 8 0 amappl5 112 113 0 107 1 0 1 1 0 8 0 amappl4 104 259 0 245 1 0 1 1 0 8 0 amappl3 96 1197 0 1111 3 0 3 3 0 8 0 amappl2 88 626 0 558 2 0 2 2 0 8 0 amappl1 80 7875 0 7326 13 0 13 13 0 8 0 amappl 88 2194 0 2041 4 0 4 4 0 92 0 uvmvnodes 80 1635 0 0 34 0 34 34 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 403 0 375 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 403 0 375 1 0 1 1 0 8 0 vmmpekpl 168 4768 0 4735 2 0 2 2 0 8 0 vmmpepl 168 32196 0 30430 82 0 82 82 0 357 1 vmsppl 368 402 0 375 4 0 4 4 0 8 1 rwobjpl 40 13567 0 11100 26 0 26 26 0 8 0 pdppl 4096 813 0 750 97 14 83 83 0 8 20 pvpl 32 206084 0 198185 68 0 68 68 0 265 0 pmappl 216 402 0 375 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 360 0 14 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ktrops(ffff80002a7c07e8,ffffffffffffffff,0,a0c7df9f,fffffd806a9402e8,fffffd8007bfb340) at ktrops+0x58 doktrace(fffffd806a9402e8,4,20c7df9f,0,ffff80002a7c07e8) at doktrace+0x6bd sys_ktrace(ffff80002a7c07e8,ffff80003c975ae0,ffff80003c975a30) at sys_ktrace+0x11c syscall(ffff80003c975ae0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd4cd933d6c0, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace ktrops(ffff80002a7c07e8,ffffffffffffffff,0,a0c7df9f,fffffd806a9402e8,fffffd8007bfb340) at ktrops+0x58 doktrace(fffffd806a9402e8,4,20c7df9f,0,ffff80002a7c07e8) at doktrace+0x6bd sys_ktrace(ffff80002a7c07e8,ffff80003c975ae0,ffff80003c975a30) at sys_ktrace+0x11c syscall(ffff80003c975ae0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd4cd933d6c0, count: -5