last executing test programs: 1.174554865s ago: executing program 4 (id=5): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) close(0xffffffffffffffff) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x173}], 0x1) (async) execve(0x0, 0x0, 0x0) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) (async) symlink(&(0x7f0000000180)='\x00', &(0x7f00000001c0)='./file0\x00') (async) syz_emit_ethernet(0xc3, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000088a83200810007000800450000ad000000010000907800000000000000004e224e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="81040002907802330202080a0000b01800000008d1c2f0bfe2d0786ca28e44289f59aba04d62ff16e6bb47f1cd981d0cf5f225560531db5a3a6c3cb3d5ac50e0eec7423f3ef5e3c4a13f81f14f843a32b529e4649b57d581159522ddf03a6cabf358af4e1ae7ab79a9aac6417859ae29d8de08ba3da1e6387381a61f166b78d7ae58ccd15a08555c8e7db3e2610f5e7be5cf05ee7fb395f1ed2ebbdc28901918d591d847ddab609706823344a85389e1195f9f53b4e3d620091c738627d028f56ab6620916b6caaa053a41fd3a6a8b8acb5c"]) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) getpeername$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000240)=0x8) (async) rename(&(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') ftruncate(r1, 0x8531) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x80a8, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 1.149123894s ago: executing program 1 (id=2): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)}, 0x1) r0 = shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000000)={@local, @local, [], {@generic={0x69, "5aa17669ec680e30b4e8a66d073f125b191464c836fab27cea1c4da54f9c6a34c638"}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000580)="ea", 0x1}, {&(0x7f0000000680)='{', 0x1}], 0x2, 0x0) nanosleep(&(0x7f0000002200)={0x0, 0x5}, &(0x7f0000002240)) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0}, 0xfffffffffffffeb1, 0x841, 0x0) 1.114266935s ago: executing program 7 (id=8): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x65b3) mkdir(&(0x7f0000000180)='./file0\x00', 0x10) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000040)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x80, 0x10205b1a) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/84, 0x54}], 0x1) execve(0x0, 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0xfffffffffffffff9, 0x63, 0x2, 0x0, 0x8000}], 0x2, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000001440), 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xfffffffe, 0x0, {0x100000000000000, 0x10040000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sysctl$kern(&(0x7f0000000300)={0x1, 0x48}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 1.112520414s ago: executing program 3 (id=4): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000140)=[{{}, 0xfffffffffffffff9, 0x5, 0x10}], 0x0, 0x0, 0x4, 0x0) kevent(r0, 0x0, 0x80000000, &(0x7f00000001c0)=[{{}, 0xfffffffffffffff9, 0x53, 0x1, 0x5, 0x1}], 0xa0, &(0x7f0000000240)={0x3, 0x3}) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00') rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0/../../file0\x00') unveil(&(0x7f0000000300)='./file0/file0/..\x00', &(0x7f0000000400)='r\x00') 1.111698354s ago: executing program 6 (id=7): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) setreuid(0xee00, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)}) r2 = getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r4}}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x78, 0x0, 0x0, r2, r4, 0x100, 0x20}, 0x3, 0xffffffffffffff81, 0x4}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x80000801, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x30000}, {0x401, 0x726, 0xe, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x4, 0x9, 0xd1b, 0x88}, {0x1, 0x10001, 0xc, 0x3}, {0x7ff, 0x4, 0x8, 0x5}, {0xb8c, 0x4, 0x6, 0x6}, {0x29a71717, 0xfffffffa, 0x4, 0x6}, {0x4, 0x7, 0x6}, {0x0, 0x1, 0x4, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r5 = getuid() setreuid(0xee00, r5) chroot(0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x3, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x20}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 1.11124854s ago: executing program 0 (id=1): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="820000ec3d1e6ed7eda0f59047bf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493857d65d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x40, 0xfffffffc, "070609000013160000050800", 0x2, 0x7f7}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r1, 0xc4504445, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 1.110572818s ago: executing program 5 (id=6): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x8) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xf900000000000002, 0x2, 0x4}) sysctl$kern(&(0x7f00000001c0)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) r3 = dup(r2) ioctl$WSKBDIO_SETMODE(r3, 0x80045713, &(0x7f00000007c0)) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) 1.109848501s ago: executing program 2 (id=3): sysctl$vm_swapencrypt(0x0, 0x0, &(0x7f0000000080)="664bb49a453be751825680f644d39cd03443ca945315e8c09fae57a6c6a28fe88e27", 0x0, 0x0, 0x0) unveil(&(0x7f0000000080)='.\x00', 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x4, 0x0, 0x9, 0x5c1, "225e00d15547436e47f637c727dd00", 0x6, 0x9}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x4, &(0x7f0000000340)="12000000", 0x4) setitimer(0x2, 0x0, 0x0) socket(0x1, 0x1, 0x80) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) sysctl$vm_swapencrypt(0x0, 0x0, &(0x7f0000000080)="664bb49a453be751825680f644d39cd03443ca945315e8c09fae57a6c6a28fe88e27", 0x0, 0x0, 0x0) (async) unveil(&(0x7f0000000080)='.\x00', 0x0) (async) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x4, 0x0, 0x9, 0x5c1, "225e00d15547436e47f637c727dd00", 0x6, 0x9}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) (async) socket(0x11, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) socket(0x11, 0x3, 0x0) (async) setsockopt(r1, 0x11, 0x4, &(0x7f0000000340)="12000000", 0x4) (async) setitimer(0x2, 0x0, 0x0) (async) socket(0x1, 0x1, 0x80) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) (async) 987.572µs ago: executing program 1 (id=9): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406}, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x10005, 0x0}) r1 = semget(0x2, 0x4, 0x120) r2 = getuid() setreuid(0xee00, r2) r3 = geteuid() r4 = getgid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000000)={{0x0, r2, 0xffffffffffffffff, r3, r4, 0x0, 0x3}, 0x7, 0x2, 0x7}) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r5 = getpid() ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x8, 0x1, 0x1, 0x8}, {0x44, 0xf0, 0x3, 0x7}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$TIOCFLUSH(r6, 0xc0187009, &(0x7f0000000080)=0x400) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r5) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x2, 0x6}, {0xb7, 0x8}}) r7 = socket(0x11, 0x3, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r9 = fcntl$dupfd(r8, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r9, 0x200074c4, 0x0) sendto$unix(r7, &(0x7f0000000080)="b1000516000004000000000003000000211c13fece60600000f96ec0c72fd3357ae30200004e3039d2d236acf28b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec589040000000043d69da41b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000000013000000", 0xb1, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=10): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) ioctl$VT_GETACTIVE(r1, 0x40047607, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x10000, 0x100) r4 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r4) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x2, 0x76d, 0x3, r4}) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) close(r3) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) dup(r0) (async) ioctl$VT_GETACTIVE(r1, 0x40047607, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) (async) kqueue() (async) kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) open(&(0x7f0000000300)='./file0\x00', 0x10000, 0x100) (async) getpid() (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r4) (async) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x2, 0x76d, 0x3, r4}) (async) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) (async) close(r3) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 uvm_fault(0xfffffd806c066e20, 0x18, 0, 1) -> e kernel: page fault trap, code=0 Stopped at mtx_enter+0x59: movq 0(%r14),%rax TID PID UID PRFLAGS PFLAGS CPU COMMAND mtx_enter(18) at mtx_enter+0x59 clockintr_unbind(ffff800001492630,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001494780) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80002a7f07d0) at dtclose+0xd5 spec_close(ffff80003c936e10) at spec_close+0x45f VOP_CLOSE(fffffd806b220210,81,fffffd807f7d77b8,ffff80002a7f07d0) at VOP_CLOSE+0x12a vn_closefile(fffffd806bf42880,ffff80002a7f07d0) at vn_closefile+0x11d fdrop(fffffd806bf42880,ffff80002a7f07d0) at fdrop+0x126 closef(fffffd806bf42880,ffff80002a7f07d0) at closef+0x18d fdfree(ffff80002a7f07d0) at fdfree+0x115 exit1(ffff80002a7f07d0,0,0,1) at exit1+0x58f sys_exit(ffff80002a7f07d0,ffff80003c937180,ffff80003c9370d0) at sys_exit+0x1a syscall(ffff80003c937180) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e4e2347ee80, count: 1 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806c066e20, 0x18, 0, 1) -> e ddb> trace mtx_enter(18) at mtx_enter+0x59 clockintr_unbind(ffff800001492630,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001494780) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80002a7f07d0) at dtclose+0xd5 spec_close(ffff80003c936e10) at spec_close+0x45f VOP_CLOSE(fffffd806b220210,81,fffffd807f7d77b8,ffff80002a7f07d0) at VOP_CLOSE+0x12a vn_closefile(fffffd806bf42880,ffff80002a7f07d0) at vn_closefile+0x11d fdrop(fffffd806bf42880,ffff80002a7f07d0) at fdrop+0x126 closef(fffffd806bf42880,ffff80002a7f07d0) at closef+0x18d fdfree(ffff80002a7f07d0) at fdfree+0x115 exit1(ffff80002a7f07d0,0,0,1) at exit1+0x58f sys_exit(ffff80002a7f07d0,ffff80003c937180,ffff80003c9370d0) at sys_exit+0x1a syscall(ffff80003c937180) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e4e2347ee80, count: -14 ddb> show registers rdi 0 rsi 0 rbp 0xffff80003c936cc0 rbx 0xffffffff82624ba0 dtclose rdx 0 rcx 0xffff80002a7f07d0 rax 0xffff80002a7f07d0 r8 0 r9 0 r10 0xd072df0db11a7cad r11 0x7118e473c94c6a52 r12 0 r13 0 r14 0x18 r15 0 rip 0xffffffff8282b019 mtx_enter+0x59 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c936c90 ss 0x10 mtx_enter+0x59: movq 0(%r14),%rax ddb> show proc PROC (syz-executor) tid=511281 pid=3863 tcnt=0 stat=onproc flags process=1018 proc=2000 runpri=32, usrpri=53, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a7f07d0 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a7f0540,0xffff80002a7f1740 process=0xffff800035d15e80 user=0xffff80003c932000, vmspace=0xfffffd806c066e20 estcpu=3, cpticks=2, pctcpu=0.2, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 71442 505413 79034 0 2 0 syz-executor 71442 25660 79034 0 3 0x4000080 kqread syz-executor 71442 369807 79034 0 3 0x4000080 fsleep syz-executor 98697 229736 45738 0 2 0 syz-executor 98697 286460 45738 0 2 0x4000000 syz-executor 59456 232856 36473 0 2 0 syz-executor 59456 375326 36473 0 3 0x4000080 fsleep syz-executor 75776 335207 85336 0 2 0 syz-executor 75776 514343 85336 0 3 0x4000080 fsleep syz-executor 84644 169177 68457 0 2 0 syz-executor 84644 446450 68457 0 3 0x4000080 kqread syz-executor 84644 423713 68457 0 3 0x4000080 kqread syz-executor 84644 120553 68457 0 2 0x4000000 syz-executor 7318 117934 93961 0 2 0 syz-executor 7318 312161 93961 0 3 0x4000080 fsleep syz-executor 31115 427038 31656 0 2 0x480 syz-executor 31115 415901 31656 0 2 0x4000000 syz-executor 31115 114047 31656 0 3 0x4000080 fsleep syz-executor 31115 315166 31656 0 3 0x4000080 fsleep syz-executor 93961 487716 81372 0 3 0x82 nanoslp syz-executor 62012 305176 81372 0 3 0x82 nanoslp syz-executor 85336 235906 81372 0 2 0x482 syz-executor 31656 434231 81372 0 3 0x82 nanoslp syz-executor 68457 461163 81372 0 3 0x82 nanoslp syz-executor 36473 182397 81372 0 2 0x482 syz-executor 79034 335148 81372 0 3 0x82 nanoslp syz-executor 45738 20090 81372 0 3 0x82 nanoslp syz-executor 81372 367026 38748 0 3 0x82 kqread syz-executor 38748 182131 35664 0 3 0x10008a sigsusp ksh 35664 151692 92297 0 3 0x98 kqread sshd-session 92297 48217 41127 0 3 0x92 kqread sshd-session 41791 346071 1 0 3 0x100083 ttyin getty 41127 74968 1 0 3 0x88 kqread sshd 93792 501062 50554 73 3 0x1100090 kqread syslogd 50554 255340 1 0 3 0x100082 sbwait syslogd 20798 253657 1 0 3 0x100080 kqread resolvd 21004 260486 65295 77 3 0x100092 kqread dhcpleased 98249 98855 65295 77 3 0x100092 kqread dhcpleased 65295 136307 1 0 3 0x80 kqread dhcpleased 29267 220108 0 0 3 0x14200 bored smr 89837 49712 0 0 2 0x14200 zerothread 11639 480052 0 0 3 0x14200 aiodoned aiodoned 58214 176421 0 0 3 0x14200 syncer update 3482 408001 0 0 3 0x14200 cleaner cleaner 73766 246418 0 0 3 0x14200 reaper reaper 79066 434276 0 0 3 0x14200 pgdaemon pagedaemon 94361 367916 0 0 3 0x14200 bored viomb 5689 144342 0 0 3 0x40014200 acpi0 acpi0 22910 69623 0 0 3 0x14200 bored softnet3 97634 163779 0 0 3 0x14200 bored softnet2 35753 198317 0 0 3 0x14200 bored softnet1 37140 397057 0 0 3 0x14200 bored softnet0 86454 3539 0 0 3 0x14200 bored systqmp 26994 14942 0 0 3 0x14200 bored systq 76982 353778 0 0 3 0x40014200 tmoslp softclock 29211 510529 0 0 3 0x40014200 idle0 1 7685 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10187 11099K 11099K 166960K 11264 0 pcb 17 12K 12K 166960K 17 0 rtable 238 7K 7K 166960K 358 0 pf 35 13K 13K 166960K 35 0 ifaddr 45 7K 8K 166960K 48 0 ifgroup 59 2K 2K 166960K 59 0 sysctl 1 1K 1K 166960K 1 0 counters 34 17K 17K 166960K 34 0 ioctlops 0 0K 2K 166960K 32 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1343 85K 85K 166960K 1362 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 97K 166960K 141 0 proc 59 67K 100K 166960K 474 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 100 7K 7K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 25 122K 122K 166960K 25 0 exec 0 0K 1K 166960K 346 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 239 147K 155K 166960K 2811 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 39 78K 96K 166960K 1163 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 2 0 NDP 13 0K 2K 166960K 29 0 temp 34 8666K 8730K 166960K 3622 0 kqueue 15 24K 24K 166960K 24 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 38 0 34 1 0 1 1 0 8 0 rtentry 136 113 0 2 4 0 4 4 0 8 0 unpcb 144 33 0 18 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 10 0 4 1 0 1 1 0 8 0 arp 88 18 0 0 1 0 1 1 0 8 0 inpcb 344 61 0 51 2 0 2 2 0 8 1 nd6 104 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 2 0 0 1 0 1 1 0 8 0 pppxif 1384 2 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 458 0 0 29 0 29 29 0 8 0 art_table 32 459 0 0 4 0 4 4 0 8 0 art_node 16 111 0 10 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1563 0 53 95 0 95 95 0 8 0 ffsino 248 1563 0 53 95 0 95 95 0 8 0 nchpl 144 1753 0 59 63 0 63 63 0 8 0 uvmvnodes 80 1649 0 0 34 0 34 34 0 8 0 vnodes 216 1649 0 0 92 0 92 92 0 8 0 namei 1024 5108 0 5108 2 0 2 2 0 8 2 kstatmem 264 26 0 0 2 0 2 2 0 8 0 scxspl 216 5544 0 5544 3 0 3 3 1 8 3 plimitpl 152 26 0 10 1 0 1 1 0 8 0 sigapl 424 418 0 372 7 0 7 7 0 8 1 futexpl 64 147 0 141 1 0 1 1 0 8 0 knotepl 120 2631 0 2579 2 0 2 2 0 8 0 kqueuepl 184 22 0 9 1 0 1 1 0 8 0 pipepl 296 98 0 71 3 0 3 3 0 8 0 fdescpl 440 402 0 372 5 0 5 5 0 8 1 filepl 120 1317 0 1099 7 0 7 7 0 8 0 lockfpl 104 13 0 8 1 0 1 1 0 8 0 lockfspl 48 8 0 4 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 29 0 13 1 0 1 1 0 8 0 ucredpl 104 66 0 53 1 0 1 1 0 8 0 zombiepl 144 373 0 372 1 0 1 1 0 8 0 processpl 1112 418 0 372 4 0 4 4 0 8 0 procpl 656 434 0 376 5 0 5 5 0 8 0 sockpl 528 132 0 103 3 0 3 3 0 8 1 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2399 0 2347 14 0 14 14 0 8 5 mcl2k 2048 127 0 109 3 0 3 3 0 8 0 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 4022 0 3835 12 0 12 12 0 8 0 bufpl 280 2241 0 117 152 0 152 152 0 8 0 anonpl 24 99262 0 96158 23 0 23 23 0 187 3 amapchunkpl 152 8071 0 7548 21 0 21 21 0 158 0 amappl16 200 2020 0 2005 5 0 5 5 0 8 4 amappl15 192 7 0 7 1 0 1 1 0 8 1 amappl14 184 117 0 107 1 0 1 1 0 8 0 amappl13 176 11 0 10 1 0 1 1 0 8 0 amappl12 168 1005 0 975 3 0 3 3 0 8 1 amappl11 160 47 0 37 1 0 1 1 0 8 0 amappl10 152 5 0 5 1 0 1 1 0 8 1 amappl9 144 250 0 250 1 0 1 1 0 8 1 amappl8 136 22 0 21 1 0 1 1 0 8 0 amappl7 128 99 0 89 1 0 1 1 0 8 0 amappl6 120 167 0 164 1 0 1 1 0 8 0 amappl5 112 111 0 105 1 0 1 1 0 8 0 amappl4 104 297 0 282 1 0 1 1 0 8 0 amappl3 96 1213 0 1095 3 0 3 3 0 8 0 amappl2 88 598 0 547 2 0 2 2 0 8 0 amappl1 80 7818 0 7262 14 0 14 14 0 8 0 amappl 88 2175 0 2002 4 0 4 4 0 92 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 402 0 372 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 402 0 372 1 0 1 1 0 8 0 vmmpekpl 168 4875 0 4848 2 0 2 2 0 8 0 vmmpepl 168 32499 0 30627 83 0 83 83 0 357 1 vmsppl 360 401 0 372 4 0 4 4 0 8 1 rwobjpl 32 13696 0 11204 21 0 21 21 0 8 0 pdppl 4096 810 0 744 96 16 80 82 0 8 14 pvpl 32 209755 0 201058 71 0 71 71 0 265 0 pmappl 216 401 0 372 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 261 0 16 8 0 8 8 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace mtx_enter(18) at mtx_enter+0x59 clockintr_unbind(ffff800001492630,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001494780) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80002a7f07d0) at dtclose+0xd5 spec_close(ffff80003c936e10) at spec_close+0x45f VOP_CLOSE(fffffd806b220210,81,fffffd807f7d77b8,ffff80002a7f07d0) at VOP_CLOSE+0x12a vn_closefile(fffffd806bf42880,ffff80002a7f07d0) at vn_closefile+0x11d fdrop(fffffd806bf42880,ffff80002a7f07d0) at fdrop+0x126 closef(fffffd806bf42880,ffff80002a7f07d0) at closef+0x18d fdfree(ffff80002a7f07d0) at fdfree+0x115 exit1(ffff80002a7f07d0,0,0,1) at exit1+0x58f sys_exit(ffff80002a7f07d0,ffff80003c937180,ffff80003c9370d0) at sys_exit+0x1a syscall(ffff80003c937180) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e4e2347ee80, count: -14 ddb> machine ddbcpu 1 No such command ddb> trace mtx_enter(18) at mtx_enter+0x59 clockintr_unbind(ffff800001492630,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001494780) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80002a7f07d0) at dtclose+0xd5 spec_close(ffff80003c936e10) at spec_close+0x45f VOP_CLOSE(fffffd806b220210,81,fffffd807f7d77b8,ffff80002a7f07d0) at VOP_CLOSE+0x12a vn_closefile(fffffd806bf42880,ffff80002a7f07d0) at vn_closefile+0x11d fdrop(fffffd806bf42880,ffff80002a7f07d0) at fdrop+0x126 closef(fffffd806bf42880,ffff80002a7f07d0) at closef+0x18d fdfree(ffff80002a7f07d0) at fdfree+0x115 exit1(ffff80002a7f07d0,0,0,1) at exit1+0x58f sys_exit(ffff80002a7f07d0,ffff80003c937180,ffff80003c9370d0) at sys_exit+0x1a syscall(ffff80003c937180) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e4e2347ee80, count: -14