last executing test programs: 191.529109ms ago: executing program 1 (id=2): r0 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) (async) bind$inet6(r0, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0x1000, "000000000000fffffffffffffffe00", 0x1}, 0x1c) (async) r1 = socket$inet6(0x18, 0x1, 0x6) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="4e2d020d10feeb2fe4c4efaf2cd8415241218b", 0x13}, {&(0x7f00000000c0)="4b18b0f3b19558e7eea1010063c9efeca349f63bbc9c0245613a3b5e9db248c6215c97700dc6979648dcf7ece4547addf0cd3e2c8f381dff38c50d8483beef851997391e80f12f99647b2adf44dc0a0f0df6fb92940498923900057e1802fe312b10288a59e8795f0b35a83084bfac47bc", 0x71}, {&(0x7f0000000140)="dbf75c5360dd25f4f8014bf121ea7ab23b33cd6e4eb39940c5de1f7d1519a22e8382f3ba36c451868b692a000e2441e353dfd5610a301efdb54331c60e952d5dc53122624cefcbef615219667283352b04c81ff4a93b78ea282fd345fd5274132946104e50b79f0fcc5418f6524ec93d21852c12b7895a4de30faae4dd34150d04471bd10c0f0a3da29b6f8b71960c61e8cccde1c1b4e42a7a8aef47710eb7b89eb2d2a0a4871d149810420762a574c298edaba4e42a58f83caab6ad6a3c55a8f1e29dbcec74a00fe613", 0xca}, {&(0x7f0000000240)="eaa0a0e3d441884f8575f348b61363fbd08c16c7e343b15fd88eb804811e94064071b6a1d3e009ed7d10", 0x2a}, {&(0x7f0000000280)="2dfa0b75c579d09a8f13439783faeaf776417315a1ed887b2f3263ba92eda5ca7aa982302ff64e222b6e07ce6691d8adc14103f2493939ed21428bab5d2367da5e6eb8d4d7c9bafc3c17d63c0de0177ef7c93a841bc10d72d69395e0de3bca4392350b7b4d514a9e25239f87436b11fdfaafa917f1df15", 0x77}], 0x5) bind$inet6(r1, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0x6, '\x00', 0x10401}, 0x1c) 164.636311ms ago: executing program 6 (id=7): openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) ftruncate(r1, 0x1) (async) ftruncate(r1, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x2811, r2, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f00000000c0)=0xc) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000040)={0x0, 0x408, 0x0}) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x2, 0x1, 0x8000000000000003, 0x2001000300000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8009, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0xffffffffffffffff, 0x40, 0xfffffffffffffffb, 0x6, 0x3, 0x8000, 0x6, 0xd347, 0x7, 0x400000000000002, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x6, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1005, 0xf916, 0x1, 0x1, 0x9, 0x9, 0xffffffffffffffff, 0x3], [0x9, 0x0, 0x8, 0x800000000b, 0x8000000000010000, 0x40000000000212, 0x1000002], [0x100000000, 0x10801, 0xcfd, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfc, 0x5}, {0x2, 0x928, 0x3, 0x8000000000000001}, {0x1000, 0x7fffffff, 0x1, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x4, 0x10000008, 0x2, 0x200000000000008}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x203, 0x1}, {0x3, 0x10000, 0x8004, 0x5}], {0x52b, 0x4, 0x401, 0x8}, {0x8, 0xffffbfc0, 0x9, 0x3}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0xffffffffffffffff, 0x40, 0xfffffffffffffffb, 0x6, 0x3, 0x8000, 0x6, 0xd347, 0x7, 0x400000000000002, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x6, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1005, 0xf916, 0x1, 0x1, 0x9, 0x9, 0xffffffffffffffff, 0x3], [0x9, 0x0, 0x8, 0x800000000b, 0x8000000000010000, 0x40000000000212, 0x1000002], [0x100000000, 0x10801, 0xcfd, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfc, 0x5}, {0x2, 0x928, 0x3, 0x8000000000000001}, {0x1000, 0x7fffffff, 0x1, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x4, 0x10000008, 0x2, 0x200000000000008}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x203, 0x1}, {0x3, 0x10000, 0x8004, 0x5}], {0x52b, 0x4, 0x401, 0x8}, {0x8, 0xffffbfc0, 0x9, 0x3}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSKBDIO_GETENCODINGS(r3, 0xc0105715, &(0x7f00000000c0)={0x2b, 0x0}) ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000040)={0x0, 0x408, &(0x7f0000000c40)}) (async) ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000040)={0x0, 0x408, &(0x7f0000000c40)}) 160.966985ms ago: executing program 0 (id=1): sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8", 0x0, 0x0, 0x0) setresuid(0x0, 0xee01, 0xee00) socket(0x18, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb19651759d163ec3600200000200000009078ac1400bbffffffff0703f7004e214e2200089078"]) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x44) r2 = syz_open_pts() fcntl$lock(r2, 0x8, &(0x7f0000000000)={0x2, 0x0, 0x31a, 0x1000300000080}) ioctl$TIOCCDTR(r2, 0x20007478) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000100)="00000094a2aff0f4426eeacc8f7cc7da900f1e7cd0803c3477e8490000280df50e7da04613f9614012c946d05f336b19942ca8c26b0f47abebdf123e856195db40d385ccb0f8", 0x46) recvfrom(r4, 0x0, 0x0, 0x1840, 0x0, 0x0) flock(r2, 0x2) flock(r2, 0x1) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x3, 0x2, 0x0, 0x100000001}) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffe, 0x6, 0x2, 0x100200000, 0x400000000001, 0x81, 0xa77, 0xffffffffffefffff, 0x7, 0x3, 0x2, 0x9, 0x3, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x8, 0x1, 0x7, 0x2, 0x5e, 0x100000000007b98, 0x800, 0x6, 0x2, 0x7fffffffffffffff], [0x20000fffffffe, 0x8000, 0x40000000, 0x6, 0xb, 0x11001, 0x128], [0xc, 0x800001fffffffffb, 0x80000005, 0x4000002, 0xbffffffffffffffa, 0x90000000], [{0x20, 0x10410000, 0x4, 0x7d06}, {0x402, 0x1e, 0x5, 0x20000000000007}, {0xd, 0x0, 0xfffefffb, 0x280}, {0xb, 0x80004, 0x5, 0xffffffffffffffff}, {0x2, 0x2, 0x4, 0xc}, {0x3, 0x2000009, 0x9, 0x2000000000000000}, {0x7, 0x0, 0xfffffff7, 0xb}, {0xa, 0x104, 0x1, 0xfffffffffffffffc}], {0x1, 0x800008, 0x80000006, 0x3}, {0xfbfe, 0x16, 0x6d1, 0x6}}}) r5 = kqueue() socket$inet6(0x18, 0x2, 0x0) kevent(r5, &(0x7f0000000000), 0x96, &(0x7f0000000340), 0xfffa4961, 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$TIOCSETA(r6, 0xcd60441a, &(0x7f0000000080)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0xff, 0x8, 0x6}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000280)={0x0, 0x0, 0xa, 0x0, 0x1}) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000280)=0xc) fchownat(r0, &(0x7f0000000140)='./file1\x00', r7, 0xffffffffffffffff, 0x2) sysctl$vfs_nfs(&(0x7f0000000000), 0x3, &(0x7f00000001c0)="3836e0c5b543c912b2d2ac18ca625c268b9d5ed853e043600758bda308fc74e05e96a08a33d8042cc95346014717202a8a5d028ff3b88763a237ac5a14172f91146d3ae2471c06ece9adf3928b29913a6601a56a2d611ae2e6e74437279f17e4e2184199b48e48d3bb71301293c37f31bd6d9df864448a4c316f2388d7f77d339f912f3a6210a07da9904352491e7c129f56b64f817cc5d5926a7b67184254f0b1aec4e63ac81d8c5133abbe06f5300c29a7312a050c7e9614b83f461ee5", 0x0, 0x0, 0x0) 159.195116ms ago: executing program 4 (id=5): mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x10, 0x0) ioctl$DIOCRGETTSTATS(r0, 0xc4504440, &(0x7f0000000180)={{'./file1\x00', './bus/file0/file0\x00', 0x1a, 0x20}, 0x0, 0x4d0, 0x0, 0x10000000, 0x5, 0xffffffff, 0xe, 0x40, 0x6}) ioctl$DIOCCLRSTATES(r0, 0x0, &(0x7f00000001c0)={{0xb31, 0x5, 0x2}, 0x18, '\x00', 0x9, {@any={'\x00', 0x0, 0x2, 0x9a}, [0x8, 0xc], 0x29, 0x7}, {@table={'./file0\x00', 0x0, 0x3, 0x2}, [0x3, 0xc], 0x80, 0x5, 0x8000}, './file0\x00', './file0\x00', 0xdb, 0x7}) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1}) close(r1) 127.116955ms ago: executing program 7 (id=8): select(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500002c0067000000069078ffffffffac1400aa4e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="603e7d8f8974c45a82abb9d5c1ff2a60d3dcbe3a04015a784ecc2be95693743b50a1e5e3b6b4d7b9f27903a385846345eb64e24702e4689c61accfa99e64fe8f69fb6b597b41255745b061f523f01aaa4244c59a1991ce055ca10a1a2c"]) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x10001, "fe800500000000000000000500", 0x8}, 0x1c) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x81, 0x0, {[0xfffffbeffffffff7, 0x0, 0x4787, 0x5, 0x8001, 0x0, 0x3, 0xffffffffbfffffff, 0x2, 0x5, 0x0, 0x800000003, 0xfffffffffffbfffe, 0x400000002000000, 0x0, 0x7, 0x82, 0x1], [0x0, 0x1007ffffffe, 0x0, 0xf2f, 0x7, 0x0, 0x8b88, 0x7fffffff, 0x8000000000000001, 0x401], [0x88, 0x100000000, 0x40000000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6, 0x1], [0x5b, 0x3, 0xc400000000000000, 0x8000000000000009, 0xfffffffffffffffe, 0x6], [{0x0, 0x3, 0x9, 0x7d03}, {0xfffc, 0x2, 0x49, 0x100000001}, {0x0, 0xffffffff, 0xfffffffe, 0xc}, {0x6, 0x120, 0x3, 0xffffffffffffefff}, {0xf7e, 0x2, 0x7, 0x2}, {0x200, 0x210a, 0x40040, 0x7}, {0xb054, 0x0, 0xfffffe41, 0x1}, {0x8, 0x80010001, 0xff, 0x2}], {0xc001, 0x6, 0x28}, {0x8296, 0x6, 0x100000b0, 0xaf3}}}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x80, 0xab, 0x8, 0x7}, {0x2, 0x1, 0x2}, {0x991e, 0x4, 0xd7}]}) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[]) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x53, 0x85, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x1, 0xb000000000004000, 0xfffffffffffffff9, 0x807}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x59}, 0x2, &(0x7f0000000100)="00e0", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x3}, 0x3, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000001900), 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0xc0785101, &(0x7f0000000400)={'tap', 0x0}) futimes(r0, &(0x7f0000000000)=[{0x800, 0x2}, {0x9, 0x6a}]) r3 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r3, 0x0, 0x17, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x5, 0x6) 27.68692ms ago: executing program 4 (id=9): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x45548) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="8f6f77ede655", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x18, 0x3a, 0x1, @rand_addr="3178f84e267a708dcfb6158d66caaf8c", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@mld={0x82, 0x0, 0x0, 0x2, 0xa47, @mcast1}}}}}}) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 26.806094ms ago: executing program 6 (id=10): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$vmm(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc290560b, &(0x7f0000000100)={0x10, 0x5, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4, 0xfff, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x9, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x8, 0x2, 0x5, 0x1, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x2, 0x6, 0x6, 0x1, 0x2, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0xce, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x80, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x4, 0xeb6, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0xb277, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x75, 0x1ff, 0x1, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x1000, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0x8, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0x0, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x6, 0x5, 0xb, 0x4, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x693, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0x9, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xffff, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x4, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x44cf, 0x6, 0xfffffff8, 0x2, 0xe877, 0x5, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0xc, 0x2, 0xf49, 0x65, 0x3, 0x5, 0xef6, 0x2, 0x719, 0x99bd, 0x3, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0x3a31, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x682, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2d, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0xfffffff7, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0xcd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x3, 0x6, 0xe, 0xa6d, 0xfc46, 0x1ff, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x8, 0x4, 0x9, 0x7, 0x10, 0x8, 0x2, 0x5b7, 0x7ff, 0x9d1, 0xfffffffe, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x317b, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0x100, 0x5, 0xff, 0x8, 0x7, 0x5, 0x4, 0xba]}) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0}) ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000000080)={0x5e, 0x3, &(0x7f0000000000)=""/94}) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6605b400001406300000000015000000eefffffffffffffffe7600000000000000000000000000aa4e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5014"]) 9.613803ms ago: executing program 2 (id=3): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000240)={0x1, 0x1}) r1 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) syz_emit_ethernet(0xe5, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000005be7644950000801504e95876b703eca3d026794cbf89ece5c74cb4f4794c36f159a02face96615b2ef29f087d0928c94247eb094e1755ba63c56c13efa6fee6cc06d5e1c9eecfb536dc881e35075e5d566a04e78f3d990a190c5e45c55496d02e0b919a9b529b0e315f993db3612fff1db72b09ed811b98e4320e5926ea401d8d2539f233c77c5d253ff7909508c35f0e47ed39bfe42654550eef94836e14e17b7c3496a92165a853bdc18c6ce90fa212ffcf4afe001e14978074b294590cd821f9c1e50a5f42685ca8be7094066ac6e06d7c2d707afb394b64d"]) fchmod(r1, 0xf3) setuid(0xffffffffffffffff) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') sysctl$hw(&(0x7f0000000000)={0x7, 0x6}, 0x2, 0x0, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f0000000500), &(0x7f00000000c0), &(0x7f0000000100), 0x0) sendto$unix(r0, &(0x7f0000000040)="0000000000cd470a638d87c8e67f5d3a917b647e592d6529af98c2511b60ca55f41844fde85cdea106244ac9870f8cd4164982997ec780f78ad0fd2916a1933522edca4e110000", 0x47, 0x8, 0x0, 0x0) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f0000000000)={0x1, 0x2, 0x7, 0x3f, "201800", 0xfffffff9, 0x40000002}) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mknod(&(0x7f0000000340)='./file0\x00', 0x80, 0x5) mmap(&(0x7f000011e000/0x2000)=nil, 0x2000, 0x0, 0x810, r3, 0x8e) sendmsg$unix(r0, &(0x7f0000000300)={&(0x7f0000000100)=@abs={0x84, 0x1, 0x0, 0x1}, 0x8, &(0x7f0000000280)=[{&(0x7f0000000140)="770c4bc3503096aeaceb02c45a645d9d024c219d9cd0f0a8182c891c66b59b81f936dee6899de2aed1209581dd933c2b55c63e95c4453b761f0d5838b064370d4f717e5a49a5b9ab4af3ef83c373fa7ad97d43649ffe34d0aa931def777f80eb693da34c3190e532ee65d83b72564e16b2b91fd48a16b39e9c124ff73d198f4d6c476676c3386b98af9794b784fbcef3f1b5547f757f3532443ef08029b405857db47ea4574b15b8abf1d46c077f0a2995e2da03a529e76b93d245449a2e9a26d31e22240473ab5a3c77e05d0dae7938ac707165587e5273d0c18323df26fc7434503ec83436", 0xe6}], 0x1, 0x0, 0x0, 0x9}, 0x404) 9.090111ms ago: executing program 2 (id=11): getgroups(0x0, &(0x7f0000000000)) shmctl$IPC_SET(0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x3, 0x0) sendsyslog(0xffffffffffffffff, 0x0, 0x39) close(r0) close(0xffffffffffffffff) r1 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00eb0100000000", 0x8) setegid(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, 0x0, 0x0) r2 = getgid() setresgid(0x0, r2, 0x0) r3 = getpgrp() fcntl$getown(0xffffffffffffffff, 0x5) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) sendsyslog(&(0x7f0000000100)="ef6cf7e43811cc76eccf314e19f9e03709de36ac8dfe852f9d383a29131a6ed011111de563e91642cb29d421022de4", 0x2f, 0x13) sendmmsg(r4, &(0x7f0000001dc0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x84}}, 0x38, 0x400) r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCMBIS(r5, 0x8004746c, &(0x7f0000000040)=0xfffffffc) r6 = semget$private(0x0, 0x5, 0xe0) r7 = msgget$private(0x0, 0x60) fstatat(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) getresuid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)=0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) msgctl$IPC_SET(r7, 0x1, &(0x7f00000003c0)={{r8, r2, r9, r10, 0x6, 0x33, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0xc000000000000, r3, 0xffffffffffffffff, 0x4, 0x0, 0x9, 0x0, 0x2}) semctl$GETALL(r6, 0x0, 0x6, &(0x7f0000001940)=""/200) 5.38411ms ago: executing program 2 (id=12): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc25769", 0x4d, 0x40a, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x51) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) 4.777837ms ago: executing program 1 (id=13): setitimer(0x2, &(0x7f0000000380)={{0x0, 0x3}, {0x0, 0x8}}, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x4}, {0x1ff, 0x7}}, 0x2) 2.060253ms ago: executing program 2 (id=14): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, &(0x7f0000000040)) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSTOP(r2, 0x2000746f) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f00000000c0)=0x1000) select(0x40, &(0x7f0000000100)={0x4, 0x9, 0x7, 0x8000000000000000, 0x8001, 0x3, 0x1ff, 0x2}, &(0x7f0000000140)={0x100000000, 0x8, 0xc, 0x7, 0xffffffffffffff74, 0x6, 0x7}, &(0x7f0000000180)={0x4, 0x8, 0x3, 0x2, 0x0, 0x8, 0x5, 0xffffffffffff8000}, &(0x7f00000001c0)={0xfffffffffffffff8, 0x87ba}) (async) gettimeofday(&(0x7f0000000200), &(0x7f0000000240)) futimes(r0, &(0x7f0000000280)=[{0x8, 0x6}, {0xb2, 0xe8}]) r3 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10, 0x80) symlinkat(&(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) (async) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$BIOCSDLT(r4, 0x8004427a, &(0x7f00000003c0)=0x800) (async) ioctl$BIOCSDIRFILT(r4, 0x8004427d, &(0x7f0000000400)=0x80) (async) renameat(r1, &(0x7f0000000440)='./file0\x00', r3, &(0x7f0000000480)='./file0\x00') (async) r5 = syz_open_pts() lseek(r5, 0xcd6, 0x0) (async) getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)=0x0) setuid(r7) (async) r8 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) shmat(r8, &(0x7f0000ffa000/0x1000)=nil, 0x0) (async) write(r0, &(0x7f0000000580)="904e82e6d4810d31a76f8e260d11b1cbdc4159455ab912ccb217f8581a519d8c1cad099c72b1453406c950d433a20447efd6491348e8ff556417d87fbe8fafd77da2424a702d69f21c1a7d6ca9fe49aed65efeebc609be22c5a26b8388f8aa243ec539dc53ad1b2050d0ae82812343cca4d595d56cd547054b972dbfb3a91f4c02b19c58079c09e7bdb9a1f62ba2ee437d3b6b8566f63d796d60b597c73c57b6f802cea9eb05db666ee81d", 0xab) (async) getresgid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) lchown(&(0x7f0000000640)='./file0\x00', r6, r9) (async) geteuid() stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) setresgid(r10, r11, 0xffffffffffffffff) (async) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) 0s ago: executing program 4 (id=15): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x205b9b) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffffa, 0x1, 0x5, 0x1, 0x2, 0x0, 0xdf5a, 0xffffffffffffffff, 0x0, 0x2eff, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x8000000, 0xa8, 0x100000001, 0xce7], [0xfffffffffffffffe, 0x2, 0xfffffffffffffffa, 0x8000ffffffff, 0x100, 0x7b99, 0x1fe, 0xb, 0x1, 0x8], [0x100000001, 0xfffffffffffffffe, 0x40000000, 0x6, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x401, 0x100000002, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0x8}, {0xfffc, 0x7, 0x5, 0x9}, {0x1, 0x80000001, 0x5bea, 0x814}, {0xf801, 0x5, 0x7, 0x8000000c}, {0x10, 0x2, 0x4, 0x808}, {0x400b, 0x40, 0x40000, 0x4}, {0xa, 0x6f, 0x4, 0x8}, {0x0, 0xffff, 0x3, 0x8}], {0x2000, 0x8, 0x10000}, {0x3, 0x0, 0x3, 0x2}}}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffffa, 0x1, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0xdf5a, 0xffffffffffffffff, 0x0, 0x2eff, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x8000000, 0xa8, 0x100000001, 0xce7], [0xfffffffffffffffe, 0x2, 0xfffffffffffffffa, 0x8000ffffffff, 0x100, 0x7b99, 0x1fe, 0xb, 0x1, 0x8], [0x100000001, 0xfffffffffffffffe, 0x40000000, 0x6, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0x8}, {0xfffc, 0x7, 0x5}, {0x10, 0x80000001, 0x5bea, 0x814}, {0xf801, 0x5, 0x7, 0x8000000c}, {0x10, 0x2, 0x4, 0x808}, {0x400b, 0x40, 0x40000, 0x4}, {0xa, 0x20000, 0x4, 0x8}, {0x0, 0x965, 0x3, 0x8}], {0x2000, 0x8, 0x10000}, {0x97d, 0x0, 0x3, 0x2}}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x20001fffffffd}) flock(r2, 0x3) fcntl$lock(r2, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x20a, 0x200000005}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0) r3 = socket$inet(0x2, 0x4, 0x0) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r3, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaab0aaaaffffffffffff080045f4002800670000000690f153933c6086c0b2aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002820090780004"]) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000040)="0320000000000078ce8cf7049334f36b69ea000701230038334000", 0x1b) msync(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000340)="c9481c85ae0c3578636ac02d37cca6081116868b19eb4f97ff4e43a560dcdbb1fd6a88a3b6b244ea8c8ac55c79e1f11091ca6ed5d1f48ae35ca9a0a8795e911f925fde84a621bb74630f9d68fa37605eb21dc3970f4258b15efa3d6555db3ffb63bc23cd92835fb0f05fc7f32a735ac6cf66c8c98ba2188ea62fd4d1e827b5fb495dfabd4ac459b8174c1304acc1f3dfd71f9f99021f8855a19db6a2504d7b7fd1", 0xa1) close(r6) kevent(r1, &(0x7f00000000c0)=[{{r5}, 0xfffffffffffffffe, 0x40, 0x4, 0x3, 0x5}, {{r0}, 0xfffffffffffffffe, 0x40, 0x4, 0x80008, 0x9}], 0x100, &(0x7f0000000180)=[{{r0}, 0xffffffffffffffff, 0x0, 0x2}, {{r0}, 0xffffffffffffffff, 0x62, 0x8, 0x0, 0x7}], 0x6, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. pckbd_enable: command error WuvAmRN_INGf:au lSt(PL 0xNOffT ffLfdO0WE0R6EcDf 1Of5N TdR0,A 0P ExX9I8T, 0a ,0 1)Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *367867 69959 0 0 0 0 syz-executor 207576 95332 0 0 0x4000000 1K syz-executor proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x778d076859f0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu1: uvm_fault(0xfffffd006cf1f5d0, 0x98, 0, 1) -> e ddb{0}> show kasan No such command ddb{0}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x778d076859f0, count: -1 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80003c3b73b0 rbx 0 rdx 0 rcx 0xffff800045feefa8 rax 0x2a r8 0xffff80003c3b72e0 r9 0x1 r10 0xf8a1d519d1d5747e r11 0xc88438d5b593ecb4 r12 0 r13 0 r14 0 r15 0 rip 0xffffffff8140b4c7 proc_trampoline+0xc7 cs 0x8 rflags 0x246 rsp 0xffff80003c3b7330 ss 0 proc_trampoline+0xc7: movl $0,%gs:0x688 ddb{0}> show proc PROC (syz-executor) tid=367867 pid=69959 tcnt=2 stat=onproc flags process=0 proc=0 runpri=50, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045fef240,0xffff80003c3b8fc0 process=0xffff80003c3d5d00 user=0xffff80003c3b2000, vmspace=0xfffffd006cb60020 estcpu=20, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 48718 341966 86234 0 2 0x100000 0 sh *69959 367867 98658 0 7 0 0 syz-executor 69959 51043 98658 0 3 0 0x4000080 fsleep syz-executor 71570 219699 43526 0 2 0x40 0 syz-executor 26426 338824 24408 0 2 0 0 syz-executor 86234 488039 74719 0 3 0x100002 0x88 sigsusp sh 25251 84647 54828 0 2 0 0 syz-executor 25251 432600 54828 0 3 0 0x4000080 lockf syz-executor 25251 314596 54828 0 3 0 0x4000080 fsleep syz-executor 71368 184966 74350 0 2 0x4000000 0 syz-executor 71368 265431 74350 0 2 0x4000000 0x4000000 syz-executor 95332 273885 69063 0 2 0 0 syz-executor 95332 207576 69063 0 7 0 0x4000000 syz-executor 61804 204024 36085 0 2 0x10 0 syz-executor 61804 444129 36085 0 3 0x10 0x4000080 lockf syz-executor 61804 95597 36085 0 3 0x10 0x4000080 lockf syz-executor 61804 103230 36085 0 3 0x10 0x4000080 fsleep syz-executor 98658 226663 67025 0 3 0x2 0x80 nanoslp syz-executor 24408 189914 67025 0 3 0x2 0x80 nanoslp syz-executor 43526 473870 67025 0 3 0x82 0 ppwait syz-executor 54828 41900 67025 0 3 0x2 0x80 nanoslp syz-executor 74719 214135 67025 0 3 0x2 0x80 wait syz-executor 69063 460891 67025 0 3 0x2 0x80 nanoslp syz-executor 74350 287364 67025 0 3 0x2 0x80 nanoslp syz-executor 36085 53980 67025 0 3 0x2 0x80 nanoslp syz-executor 67025 519751 42746 0 3 0x2 0x80 kqread syz-executor 42746 117457 86594 0 3 0x100002 0x88 sigsusp ksh 86594 436546 23729 0 3 0x10 0x88 kqread sshd-session 23729 120134 80756 0 3 0x12 0x80 kqread sshd-session 27750 56847 1 0 3 0x100003 0x80 ttyin getty 80756 351382 1 0 3 0 0x88 kqread sshd 58139 262511 66462 74 3 0x1100012 0x80 bpf pflogd 66462 43146 1 0 3 0 0x80 sbwait pflogd 31087 302526 65014 73 3 0x1100010 0x80 kqread syslogd 65014 288768 1 0 3 0x100002 0x80 sbwait syslogd 21589 521911 1 0 3 0x100000 0x80 kqread resolvd 40825 372306 15064 77 3 0x100012 0x80 kqread dhcpleased 74658 347665 15064 77 3 0x100012 0x80 kqread dhcpleased 15064 365078 1 0 3 0 0x80 kqread dhcpleased 99149 23164 0 0 3 0x14000 0x200 bored smr 11915 285713 0 0 2 0x14000 0x200 zerothread 15096 402845 0 0 3 0x14000 0x200 aiodoned aiodoned 61037 322190 0 0 3 0x14000 0x200 syncer update 62115 418769 0 0 3 0x14000 0x200 cleaner cleaner 61419 195734 0 0 3 0x14000 0x200 reaper reaper 65074 104372 0 0 3 0x14000 0x200 pgdaemon pagedaemon 97374 274404 0 0 3 0x14000 0x200 bored viomb 98253 471692 0 0 3 0x14000 0x40000200 acpi0 acpi0 76700 4057 0 0 3 0x14000 0x40000200 idle1 74345 136260 0 0 3 0x14000 0x200 bored softnet1 32751 129950 0 0 3 0x14000 0x200 bored softnet0 83929 482252 0 0 3 0x14000 0x200 smrbar systqmp 87858 445576 0 0 3 0x14000 0x200 bored systq 47034 103482 0 0 3 0x14000 0x200 tmoslp softclockmp 30940 231233 0 0 3 0x14000 0x40000200 tmoslp softclock 11785 4345 0 0 3 0x14000 0x40000200 idle0 1 291348 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd006cb5f110) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pmap_enter+0x24b #3 uvm_fault_lower_lookup+0x369 #4 uvm_fault_lower+0x89 #5 uvm_fault+0x274 #6 upageflttrap+0xa9 #7 usertrap+0x430 #8 recall_trap+0x8 Process 69959 (syz-executor) thread 0xffff800045feefa8 (367867) shared rwlock uobjlk r = 0 (0xfffffd006f6dbe30) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_lower_lookup+0x53 #3 uvm_fault_lower+0x89 #4 uvm_fault+0x274 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd006cb60120) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd006cb5f110) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pmap_enter+0x24b #3 uvm_fault_lower_lookup+0x369 #4 uvm_fault_lower+0x89 #5 uvm_fault+0x274 #6 upageflttrap+0xa9 #7 usertrap+0x430 #8 recall_trap+0x8 Process 95332 (syz-executor) thread 0xffff800045feea78 (207576) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839f8700) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 Process 83929 (systqmp) thread 0xffff800045ffef90 (482252) shared rwlock systqmp r = 0 (0xffffffff83991e98) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11060 12158K 12158K 166960K 12152 0 pcb 17 12K 12K 166960K 17 0 rtable 235 6K 6K 166960K 347 0 pf 34 17K 21K 166960K 49 0 ifaddr 43 7K 7K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 1484 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1290 81K 81K 166960K 1368 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 19 69K 93K 166960K 144 0 proc 71 115K 164K 166960K 554 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 4 0 in_multi 99 6K 6K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 389 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 225 168K 177K 166960K 3198 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 44 88K 104K 166960K 1322 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 14 0K 1K 166960K 28 0 temp 35 9114K 9122K 166960K 3974 0 kqueue 14 22K 22K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 34 0 31 1 0 1 1 0 8 0 rtentry 176 110 0 1 5 0 5 5 0 8 0 unpcb 144 47 0 28 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 11 0 7 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 75 0 64 2 0 2 2 0 8 0 nd6 152 23 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 18 0 0 1 0 1 1 0 8 0 pfstkey 128 18 0 0 1 0 1 1 0 8 0 pfstate 448 18 0 0 2 0 2 2 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 459 0 0 29 0 29 29 0 8 0 art_table 40 460 0 0 5 0 5 5 0 8 0 art_node 32 110 0 10 1 0 1 1 0 8 0 semapl 72 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1579 0 113 92 0 92 92 0 8 0 ffsino 296 1579 0 113 113 0 113 113 0 8 0 nchpl 144 1781 0 84 64 0 64 64 0 8 0 vnodes 216 1670 0 0 93 0 93 93 0 8 0 namei 1024 5496 0 5496 2 0 2 2 0 8 2 percpumem 16 51 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 6133 0 6133 4 3 1 3 1 8 1 plimitpl 152 29 0 12 1 0 1 1 0 8 0 sigapl 424 470 0 421 7 0 7 7 0 8 1 knotepl 120 299 0 0 10 0 10 10 0 8 0 kqueuepl 224 24 0 13 1 0 1 1 0 8 0 pipepl 344 129 0 102 3 0 3 3 0 8 0 fdescpl 528 454 0 421 3 0 3 3 0 8 0 filepl 160 1615 0 1391 10 0 10 10 0 8 0 lockfpl 104 15 0 7 1 0 1 1 0 8 0 lockfspl 48 7 0 3 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 32 0 15 1 0 1 1 0 8 0 ucredpl 104 94 0 80 1 0 1 1 0 8 0 zombiepl 144 421 0 421 1 0 1 1 0 8 1 processpl 1232 470 0 421 5 0 5 5 0 8 0 procpl 664 492 0 435 5 0 5 5 0 8 0 sockpl 752 156 0 123 4 0 4 4 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 127 0 0 16 0 16 16 0 8 0 mcl2k 2048 9 0 0 2 0 2 2 0 8 0 mextrefs 64 8 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 128 0 0 8 0 8 8 0 8 0 bufpl 272 2288 0 105 146 0 146 146 0 8 0 anonpl 32 3726 0 0 31 0 31 31 0 247 0 amapchunkpl 152 8584 0 8129 20 0 20 20 0 158 1 amappl16 200 1558 0 1543 5 1 4 5 0 8 3 amappl15 192 4 0 3 1 0 1 1 0 8 0 amappl14 184 438 0 436 1 0 1 1 0 8 0 amappl13 176 124 0 112 1 0 1 1 0 8 0 amappl12 168 705 0 676 2 0 2 2 0 8 0 amappl11 160 2 0 2 1 1 0 1 0 8 0 amappl10 152 71 0 56 1 0 1 1 0 8 0 amappl9 144 277 0 277 1 1 0 1 0 8 0 amappl8 136 99 0 97 1 0 1 1 0 8 0 amappl7 128 146 0 133 1 0 1 1 0 8 0 amappl6 120 168 0 166 1 0 1 1 0 8 0 amappl5 112 101 0 91 1 0 1 1 0 8 0 amappl4 104 404 0 384 1 0 1 1 0 8 0 amappl3 96 1531 0 1442 3 0 3 3 0 8 0 amappl2 88 572 0 499 2 0 2 2 0 8 0 amappl1 80 10709 0 10105 15 0 15 15 0 8 2 amappl 88 2456 0 2304 4 0 4 4 0 92 0 uvmvnodes 80 98 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 454 0 421 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 454 0 421 1 0 1 1 0 8 0 vmmpekpl 168 5767 0 5735 2 0 2 2 0 8 0 vmmpepl 168 38776 0 36869 84 0 84 84 0 357 1 vmsppl 488 453 0 421 5 0 5 5 0 8 0 rwobjpl 80 14549 0 13543 23 0 23 23 0 8 1 pdppl 4096 915 0 842 99 22 77 85 0 8 4 pvpl 32 9744 0 0 80 1 79 79 0 265 0 pmappl 256 453 0 421 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 411 0 25 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x778d076859f0, count: -1 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 comcnputc(800,29) at comcnputc+0x250 cnputc(29) at cnputc+0x67 db_putchar(29) at db_putchar+0x36d kprintf() at kprintf+0x29c5 db_printf(ffffffff83462238) at db_printf+0x9b fault(ffffffff83524a1d) at fault+0xa7 kpageflttrap(ffff800039ba30a0,98) at kpageflttrap+0x37d kerntrap(ffff800039ba30a0) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff800045feea78,fffffd006ce636c8,ffff800039ba3280) at dovutimens+0x368 end trace frame: 0xffff800039ba32f0, count: 0 ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 comcnputc(800,29) at comcnputc+0x250 cnputc(29) at cnputc+0x67 db_putchar(29) at db_putchar+0x36d kprintf() at kprintf+0x29c5 db_printf(ffffffff83462238) at db_printf+0x9b fault(ffffffff83524a1d) at fault+0xa7 kpageflttrap(ffff800039ba30a0,98) at kpageflttrap+0x37d kerntrap(ffff800039ba30a0) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff800045feea78,fffffd006ce636c8,ffff800039ba3280) at dovutimens+0x368 sys_futimes(ffff800045feea78,ffff800039ba33d0,ffff800039ba3320) at sys_futimes+0x208 syscall(ffff800039ba33d0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc7a233ded0, count: -17