last executing test programs: 2.759319309s ago: executing program 2 (id=3): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000180)="4f3c226ce99c1770858967a18cb425863412ec80b26fe1f2abeb49ec63efd069afd72b6c35f8384b4bfd34028ea2012d7feaa19ee37afb2e7a6114cd8992d8d9111f87fedd401c7a70f0f7845d5c73d09bbb8dbbd213e8f150802fa6f0a1dd0a9acf3abb7921544ea7a36f4a1113adc6c4506f79eb056c60a49a79ec2a14d4b71ca0309a02c6abc191b1e701ea470a8e1f41edd0be8bb9949b0a7be94f4e", 0x9e}], 0x1) r2 = accept(r0, 0x0, &(0x7f00000000c0)) getsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000001580)=""/4111, &(0x7f0000001540)=0x100f) execve(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x0) 2.719489703s ago: executing program 0 (id=1): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xd02) (async, rerun: 32) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (rerun: 32) ioctl$BIOCLOCK(r0, 0x20004276) (async) ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000280)) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async) closefrom(0xffffffffffffffff) (async, rerun: 32) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async, rerun: 32) closefrom(0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = getpgrp() kill(r2, 0x13) (async) closefrom(r1) (async) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='x\x00') (async) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) (async) r3 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r3, &(0x7f00000000c0)="3a9113688fcaa85ae6eddebadf474d3e1679bbbbc676ea104275b0335e0f16e17fb4242359484a4636b0cd3f578dc0200638a7675a982cb59ceba5174e4ecd0b5411e09887b9ea2d94db0845afa8ed4c7076eb815dd08c468354ee455f6ef7f3791cf8fcda971e0390daf159a1c92c4fea834c54fefcc575de4c6cc4a91742e47a74cf3a5d311c3a728396edba44ae4b0991d820f3e7bec6bed1693d35de4b92fda77fbcb209613185a2428a79be763670af231ed5eba054492251f98f72e8e8344d73c9bed014ea170d97d855949d2a8b696badca6b", 0xd6, 0x4, &(0x7f00000001c0)=@abs={0x5, 0x1, 0x0, 0x3}, 0x8) (async) mquery(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xffffffffffffffff, 0x8) 2.680058989s ago: executing program 5 (id=6): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async, rerun: 64) r1 = socket$inet(0x2, 0x8003, 0x1) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0x80047308, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000100)={{0x0, 0x53, 0x0, 0x0, &(0x7f0000000140)=""/197, 0x43}, 0x7}, 0x38, 0x0, 0x0) (async, rerun: 64) select(0x40, &(0x7f0000000240)={0x3, 0x7, 0x7, 0x9, 0x4, 0x5, 0x90a3, 0xf1a}, &(0x7f0000000280)={0x2, 0x3, 0xfffffffffffffff4, 0x7, 0x0, 0x2, 0x7, 0xa}, 0x0, &(0x7f00000002c0)={0x3, 0x7}) (rerun: 64) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) (async) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000380)=""/46, 0x2e}], 0x1) (async) sendmmsg(r5, &(0x7f0000000840)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x48}}, 0x38, 0x4) (async) setrlimit(0x0, 0x0) closefrom(r3) (async) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r6 = socket$inet6(0x18, 0x3, 0x3a) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0x66, &(0x7f0000000900)={0x4, 0x0, 0xf}, 0xc) (async, rerun: 64) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0x67, &(0x7f0000000940)={{0x1c, 0x18, 0x0, 0x9, "62c3552fc8bac05f7a5e1e18e9c9ea59", 0x3}, {0x1c, 0x18, 0x1, 0xfffffff8, "ecdf42192a500fdfaa24e336d57feeba", 0xfffffffc}, 0x9, [0x0, 0x6, 0x80000001, 0x2, 0x7, 0x80000000, 0x2, 0x6]}, 0x5c) getsockopt(r1, 0x0, 0x7, 0x0, 0x0) ioctl$DIOCRGETTSTATS(r0, 0xc4504440, &(0x7f00000003c0)={{'\x00', './file0\x00', 0x4, 0x36}, 0x0, 0x4d0, 0x0, 0x0, 0x4, 0x20000008, 0x1ffe000, 0x0, 0x1}) 2.659505487s ago: executing program 6 (id=7): r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PCIOCREAD(r0, 0xc0107002, &(0x7f00000000c0)={{0x0, 0x5}, 0x660f, 0x4, 0x43ff}) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 1.330029277s ago: executing program 0 (id=9): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x7) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x29) ioctl$TIOCOUTQ(r1, 0x40047473, &(0x7f00000000c0)) (async) ioctl$DIOCCLRSTATES(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0xffff8000, 0x2}, 0x2, '\x00', 0xe55, {@addrmask={@v6=@ipv4={'\x00', '\xff\xff', @multicast1}, @v6=@empty, 0x0, 0x0, 0x1}, [0xaa8c, 0x800], 0x4, 0x9, 0x2}, {@table={'./file0\x00', 0x0, 0x3, 0xb0}, [0x4], 0x1, 0x4, 0x40}, './file0\x00', './file0\x00', 0x7fffffff, 0x1}) (async) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (async) poll(&(0x7f0000000240), 0x0, 0x2) (async) mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1) (async) sysctl$vfs_nfs(0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000800), 0x0, 0x0) (async) r3 = socket$inet6(0x18, 0x3, 0x3a) getsockopt$sock_int(r3, 0xffff, 0x1007, 0x0, 0x0) (async) ioctl$DIOCCHANGERULE(r2, 0xcd60441a, &(0x7f0000000940)={0x4, 0x4, 0x1616a7d9, './file0\x00', './file0\x00', 0x0, "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"}) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000003780)={{0x10, './file1\x00', [{[@v4=@loopback, @v6=@local={0xfe, 0x80, '\x00', 0x0}], [0x2, 0x9], 0x3, 0x2}, {[@v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v6=@mcast2], [0x2742, 0x5], 0x9, 0x239b96fd0618c1c}], {{0x5, 0x81, 0x1, 0x4}, 0x7fffffff, 0x0, 0x4, 0x0, 0x1165, 0x4, 0xe}, {{0x1, 0x28, 0x3, 0x7fffffff}, 0xff, 0x2, 0x5, 0xfff8, 0xb, 0xf, 0x8}, @v4=@broadcast, 0x1000, 0x4, 0x7, 0x7fff, 0x8, [[0x8000], [0x2, 0x5]], [[0x8d, 0x6], [0x3ff, 0x4]], 0x4, [0x2, 0x7], 0x6, 0x0, 0x1, 0x3, 0x7, 0x9, 0x4, 0x5, 0x6, 0x9, 0x1, 0x9, "831f"}}) (async) closefrom(r0) 1.328087336s ago: executing program 2 (id=10): r0 = syz_open_pts() r1 = socket$unix(0x1, 0x5, 0x0) closefrom(r1) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x19083084ca9cf73d, 0x2) ioctl$BIOCSDLT(r2, 0xc0184406, &(0x7f0000000080)=0xffff) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[{}], 0x6, 0x0, ""/32, 0x1, 0x1}) kqueue() r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DIOCCHANGERULE(r3, 0xcd60441a, &(0x7f00000002c0)={0x4, 0x0, 0x1, './file0\x00', './file0\x00', 0x0, "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"}) pwrite(r0, &(0x7f0000000140)="9288d4aee53244652e142e06c73db3720789d77ae4d8b520565f649f12dfc4ca8fbec479d53c2d41c88d2ac10e383e03eeff811ecab8285d9734a07324b660cc91a529e3be810af9e5", 0x49, 0x23a) ioctl$DIOCSETTIMEOUT(0xffffffffffffffff, 0xc008441d, &(0x7f0000001040)={0x4, 0x2025}) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x80007, 0x7ffc, 0xffffffbc, 0x7fff, "fe04000400d40720f9ff0eaa050349bfe36000", 0x101, 0x1}) write(r0, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) ioctl$WSDISPLAYIO_GETSCREEN(r2, 0xc0245755, &(0x7f0000001080)={0xffff, './file0\x00', './file0\x00'}) 1.327646746s ago: executing program 3 (id=4): r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x69) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x2012, r0, 0x2000) open(&(0x7f0000000040)='./file0\x00', 0x19083084ca9cf73d, 0x2) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x1104, 0xffffffffffffffff) mkfifo(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x2, 0x8c) r2 = getthrid() fcntl$setown(r1, 0x6, r2) pselect(0x16, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$DIOCGETQUEUE(r3, 0xc148445f, &(0x7f0000000140)={0x9, 0x92, {'\x00', './file1\x00', './file0\x00', './file1aaaaaaaaa', {{0x180003, 0x9}, {0xffffffff, 0x402}, 0x10001}, {{0x9, 0x6}, {0x8000000000000000}, 0x10000}, {{0x6, 0x3}, {0x1f, 0x3}, 0x2}, {0x8, 0xf, 0x3, 0x9}, 0x0, 0x3, 0x0, 0x4, 0x2ec6}}) ioctl$DIOCRCLRTSTATS(r3, 0xc4504441, &(0x7f0000000a00)={{'./file1\x00', './file1\x00', 0x0, 0xff}, &(0x7f0000000e80)=[{'./file1aaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0\x00', 0x0, 0x2}], 0x428, 0x1, 0x7f, 0x86, 0x80007, 0x208, 0x12, 0x80004}) 1.323902763s ago: executing program 1 (id=2): syz_open_pts() socket$inet(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r0 = socket$inet(0x2, 0x3, 0x5) setsockopt(r0, 0x0, 0x13, &(0x7f0000000140)="9a350700", 0x4) r1 = semget$private(0x0, 0x1, 0x62) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r2, 0x0, r3, 0x0, 0xfffa}, 0x0, 0x3, 0x0, 0x0, 0x6a1fdb56, 0x0, 0x3}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) semctl$SETVAL(r1, 0x0, 0x8, 0x0) mprotect(&(0x7f0000149000/0x3000)=nil, 0x3000, 0x1) pselect(0x24, &(0x7f0000000080)={0x80000000000000ff, 0x3ff, 0x1, 0x8, 0xb, 0x8, 0x1, 0x8000000d}, 0x0, 0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x0, 0x80) semctl$SETALL(r4, 0x0, 0x9, &(0x7f0000000200)=[0x7, 0x9, 0xfffa, 0x40, 0x9]) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) seteuid(r5) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$kern(&(0x7f0000000300)={0x1, 0x42}, 0x2, &(0x7f0000000340)="72a47ed44fa2c22bbd02e24df367478232ea3c4cebbfa1130b04924c081e5ac10d9aadfd7d5dbc8252247d6dffbf1148b0f0e57c6d568e9dc37c519361b9fe940a22de0758a655ebf8489bee64d95f0c923268cdf7161c0886bf7d61bde9429924aa9eb4a3a31ffe3a5ba9f5b8c41175e3880e016b0ce9733b7b08720d36939cf8d62231611b3484019e29bde4392fdea8bea2d66761b9603ccb64e0608557d95c33f16e14b1029f82b1c4a3d8ac56d2e326a9d2480134390c83d6d3", &(0x7f0000000400)=0xbc, &(0x7f0000000440)="05d24a035af90e79557be8fb1979c08657069069c2cb3ac98b0a208cd9e58e7067eb785db5a928ac89a181f869c71a70d08cbe50b287171ce10d0bbb59e3db3559b3c475fc97e4acc3b48fb8a7f8786e453fd489b97aeac2a20b8021c959ee176d583534745764077e6cd0b972ab169571b26964d2810fe35fff5e4ea29dce0877fb33262f50075d834db3cfa92efb6a79b3e78ce84829626e2488fc1314f6c2033b42b49ad0430d546226fb7b255c9a804e9ec055e046811bf728b87265c5d6c42f40a98245eb034fc7623cbbe5ebdddd690b97644d", 0xd6) sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x3, &(0x7f0000000180)="ee8f409198157e3b0d482cd811439e57ce10400116e4853368b7858dd5313a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d270400"/104, &(0x7f0000000080)=0x5b, 0x0, 0xfffa) 5.107507ms ago: executing program 0 (id=11): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$DIOCRDELADDRS(r0, 0xc4504444, &(0x7f00000005c0)={{'./file0\x00', './file0\x00', 0x6, 0x9}, 0x0, 0x34, 0x0, 0x4, 0xc1, 0x8001, 0x2, 0x46, 0x4}) bind$unix(0xffffffffffffffff, 0x0, 0x0) seteuid(0xffffffffffffffff) r1 = syz_open_pts() write(r1, &(0x7f00000000c0)='B', 0x1) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0xd02) open(&(0x7f0000000180)='./file0\x00', 0x8000, 0xe0) r2 = socket$unix(0x1, 0x2, 0x0) closefrom(r2) setsid() r3 = syz_open_pts() ioctl$TIOCSCTTY(r3, 0x20007461) ioctl$TIOCSTAT(r3, 0x20007465) mkdir(0x0, 0x10) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0xd01) r4 = open(&(0x7f0000000200)='./file0\x00', 0x80, 0x43) ioctl$TIOCSETD(r4, 0x44946472, &(0x7f0000000240)) r5 = open(&(0x7f0000000280)='./file0\x00', 0x1, 0x26) ioctl$TIOCSETD(r5, 0x84946467, &(0x7f00000002c0)=0xffffffff) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000080)={0x10, 0x2, 0x2, 0xac1403aa}, 0x10) socket$inet6(0x18, 0x1000, 0x6) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) poll(0x0, 0x0, 0xfffffff8) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r8 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r8, 0x80206979, &(0x7f0000000580)=0x7) 3.941938ms ago: executing program 2 (id=12): mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) accept(0xffffffffffffffff, &(0x7f0000000100)=@un=@file={0x0, 0x0, ""/253}, &(0x7f0000000200)=0xff) sysctl$kern(&(0x7f0000000000)={0x1, 0x2d}, 0x2, &(0x7f0000000240)="5b6ad330779b59bcb41543e8cc39414beb17a939f92e8cd03b2fa5d690985ab39fafc1de5463a5f586d5c1e4f3fd91ec6e8f863306cdcdbca1851bd5d43ce2718329f3b07e7e7dcbb72d6b4a460077fb997bb566aa9b65b6c4c0ffe4398b0ffc7b55ead3eac860633d73e1cd6a1e20a433d5718f56a46e5c7ef4838f0ca77b0c4b57861f8c17a4d526dd89b49b8640da43fa06684091932bc65fc5ad2047c3febc1655e6fe15bb395320d6ef4c35233f47e4ae2af39fb16be27dd4835c17a66a14e5d037833c7a220d82bf3bc5ffb9715b04fad23a77b6f6ddcd79b8a09f04e7a0860cd93d58edd80ad1b027a6fefa5cfd1d6265d6a7c420549cbfeea6e5c802da4a146415406a2598d7c71c560e505ff4c4b7749f64175cb2bfa506b9af30e365304d3cd0de168109874579682e76ce1f895329498ee37af7a38115fbe6258296702dabf0cfecb464204b2340562fd79f422dc46a5ea5ef4ab964c615490706da16b7eae5798b80f686cadc2a35b16314bd4bab61059a80112530274a3bd09656cd7818253e79e3b05e193a49cffac873e10f3040f7ac741f66e27d828952ab9684173b7fb46d425a896e3b146e8e72526181bd9c4e25b053d856493fb0b5b769f86e809570ecdda83349f4954a234ace732a54bc43035606d78386bbf4519032b89e4c5acd5702f6fcf9d9e4dcb2034fbfd0216999b05652b7d224adddc27d33bf3eaffd9258e0b8125194394474187566c3758a9a20ec9cae063bb3c189f6fb599dece408be09f182287a5e117c90fe4a7d2e23f627fee5e1c49e421059b4292047f2200fc781c91cc0e50e284824aa91dc896d85fc7e70d766186c26778b417373a55fc31b59048ea230005795f21e834fb119714ac6af9c5d5b7584e85012d69ba00f07fa2156d3092325dc283f26dd007ee5f2fa1a68cc34ee772b407df266928daebdc263a28bb0287efa85ec264bebc1d6e56b32025a6ea7c7236a0ac73c346c85fdb2632435a5c1675f54e98ddb88c52504cc6bd22bc3569b11576ea15593b66c60182a34908c1e0cfcce948a3820dedeeef81e62bbaa1920a7da6f19a4a6cf3624d2037629a71f5ad11d0a61e2ea324eaefd3a5d8d95aeabdfae89fd469d47b105bc2d6e5ce9cc3a6c33e4fbf62cd8649afe9cd76a3ac81962f81c170a24bb8710ce32d095086a9c3d6c56d18c851d9ae5301b1d880b66cbd72b226ebff5f1c9d8ab955537f3bc27bd866c4ff9e8120a771fce18a9945ce0303bfb226bc020902ff3544ef515c589ec5307da6600e52ef382f1c4d7e8050a4a5ebeaf5389f14ed1a65f3bb4ef7544a603e0c0202afcec53ad0d1d0651c67285006002dd35d03b616562b9cd3798dc79877fc713e89671207ec389545cf0fd38f5abb605f3ad039ee77dc9ec660c2595d9ca50b185d3ae18d43890170e0ea85fa86518a174a0934c3053a8d0f7be88af1a2dd09b62421d5cd526dccd72e6cf10898703d0637fa33b8ca66ea7812af8cf297cfd279b598ab55cc305f2e3a5c08bfd659c994286a5bc9df499d1431fa5cc6548dce72c8d55376721eaa3bab6485fbaa016103b83aff2c5e92d6f1c44ab3fefa1893234808ce9c447435c72a77db1b382c6ece6cc1bc88011504124f26d5dc13a45a09ae316b72ed835129458d6e2a07d27215820f4f5744b0e84bcf72e526f094f8bddf6764a501637a1cd5b9cbc31445434c58ac007acb19bbf37511d07781ee3528e4f42862815fe1628ad1dc5ca9a5562b3f89d6c41d496937781cc25771b88b784d99ffeb85049fedadd386613cc30e33f3391707c77c340408d082e4cceb003634a85fe7e33ae1677bfe2f2b9e26a0507e83fd0c0f95b818fda4624f916628b96888470a65ed132fe1d3b4f3dcbd190de07baa3e091549111efa28f20889ebd7821749ddb00b043ea64c7803b7fed83b663b2283bde4a92c21488666a1c8200428932ad2d2377c31dc82459c9ece8267ae686481733a42d28ad14b195af78f2c54a671a65587b8a0a3d55667ad845695b21f3e4eafe6e3e7d309542397109ad3ef205251192d31aeb87ce5a74dec9457da6cf21e0a54e2a5df4182228803e3c47cf01e0d5c55b301b178159029b8aa4721e7e36da760b13dbb19971cca4005547e1eb205e05ac7f9981cc2be4266f12a8d2ab465ef40539741f843b47d4ec5bdf2b873e7e997d1406b213098e4face6d49eabeb603800e5ae5339697180f5529b7908be93494db7728c123bd0b01c56389a266ced704b383f24b2151a8e7c57648c1f8fdb70a963a0b94f4af4382a125d0b6da4f183d0a8027213e1ad0b1a50c5d4bf884e17acbd78922511ee6dece57fe5c5be539ccaf8ed15974ed6c6148380059ce30c1c2587d3e93811163249bb786a06050ffe29bfa9af0abaae56bf71f7b1585b06d5a128f5c6904fe34f814531eee5cb0e3e01f05e97c7befbfd10fec6099094692402c1d2dba5cca5ee6d2409629882f126077f2389744394473b248888d6ac0e10899f6bb29439eef4c558763cd7606b6d8a6876c7d43b3533b24c091f1dfb5d9595d29410dbb6809b08b1e5a03334f01a59b46624ba8b2872a13b351624d4005e4e2892cb180304c7e3a84a39e54a922addc5393fb28a575967a02fd899dfbc376e2516788ac6e14b71bb8bf6fd9c069fb1eaf0a9e89b19a53c8d5ce20aecd89f994868e565cdc31710223805a48081a9993b97beb71e2750f9836e04556b1d25cfc9152965d519a857f28b3ba97c7560ad377775785999b5f0c1dced08e205c0421323712f453a9cda76d4a9d993395167643d7d2dfb6b654fc4cf639c12ee85021eb983f090abe4248be54c52a7c80e512a6ee68c3b7c1de0336e717dfeda6db011bd79efee1bd9b197457c6dc1ab7c4f07d001f4cdaaf8a2034b7c61e8f23e8776f045214919fe7930f3d841fda0abc0f3c6ad330337bed84f81e78009fa4c4b75cce87ebc26b217135ab44cff4a0c722ada2b3de5a7041c2b8a365943503ea97647056a96b1c76b1072da1ff7d3c170e3449ab3d29acda651e712357c3584b4b79d03b377eac58c102b08cd6b25d884479ca14fd74eb96aac9c41c338cacf610bc8aafa87cf43a6321d947043db685e0eedc83f7f6496ffbb7fabca85ed1ec34ef1c6c06c91c3c74dcd4a92f965d66844863752dc5155ec9f4a943127abe50ee0f7628f1b69584bcfa99421f0afb87eef3451d1c657bf68a59081305ec3ee952514a7f8a36ec5d8599d75768cfd032c5ac0c7349e45db4aa8499ed773964da544ce6150d71d2c3dd3f230477027f32fe50db7041d472afc3f39836cab21a36c92ce6c7ad8f2a4e3e1b11a6a712f01cc6efe402b120462d69f9b30615b0fd4acdedc6f652bda6c5c92686196c4b1daa7203e1b419fca6313743090d57c8c689405f42050346ea27f8cf11b4626968f381adc578edbe98b01c22750ddceca73011713b4a4539e3161b5e5818b5662a7949a4a7a3451e036e4d60ab6742c7b4a8e7486788e20cbd5528ab27c47d0249e08b4f8d961d912ce512430d8376a99fe1ed12aec0516f4627725a5ef14b3d14420a59eae81b66c62dbb9d3ffff3e167e8294199926eb6faeb2f3e039fea5bf71250c9a8d0092585e86b547a6577c4c3f1750ccf00d6e3a1f511e51223210c4feb1e2c2fb5cbb3d6df10c368e4335f62911e869fe48af016bb5e18c8c2a34b973cdda785ba8f6f6d3d852522e1844dee01289e7ed2f46ebb5fa1c1b09f10cd85edb7ddfd13c10247c70a70eca4a89033851976660645a9e4394064c718d76274d5b5bb3272387f346f1017472244072e10405035a14b58e009f5b76745028db3c9edc43509a4b57ba5deceb3fc5db950c1edca0b510e5194b4757b029ae47eeec2dd20e3a4a28ee71273a9de7f87d54d855a5b7ab504c9f9edf7d2dfd435c431e46ba7279c353cf5e0e13666927de823350e94f993550fa1394f94e4343dba7748d6f5c58198b826e6a319eaabeebc483bf16d25af9925620ab5400d9a0bd53b5849e881ecd5ec326bf9cb2834addf5d3dea8445117c514893c9ba1587ef2ee741945393bc59f6f69114663bcebee224e98e28171fe16bbce2c75c8c9bb16480b3bd3511b8b7521355d43baf37c88597da3a9de2fa95a3c625062d8563a727c321e5f4f6a7dab849b83cd8ab91caf1993df2ac72d00152cd628a31bdee354413e5002462e6c181864a03a8bd7cf5ffc871b7b4ba87c74b8b44dc54e820476b63c2c5cf7e155da482cbf77e786a63bb082f222f25e6eb9cb6dfd1955e30d8f0c8df332fd46863ad8a06006cd0acc0dd045355a6f17cc61853113f495f2c0898617ce9b6383ea1586dfe99fb0c270be2635e814e7eb79e461d4f91caee57be289cd37b7ef34340c60a745dc2c374439bc7186ae8a8d35c1c13b4b658bc7371b2216787d56c5088328f043109aa1979471700833df6026344d215df17f6162ab5f485b326f810357754184741c204507555f5c07c35e8ac5957354af66ec0341860b6066a53bebe7c72d6f87f11b8b309c8e1b875d98197f173a7d0f5ab5eed622e76e58857024f6e804287ad23422c23554c838ef757558ce1381bc437de4a8bed804fa4c88b8a0f1295b5c8f980b07af08d492bc5c3bf41edc330ce974fccd880cdea54916e66100bc6e718b792480711093f68c11fb143a77fcd67a1e32a74a6f2178ab0a63231ce31dff335bce5595a4f36e5174690461ce369ac85e0a5fab5408f64e32146756880f9603a762d0bbdf72ef624081d3aa3f2473d96f948757022cf9274de1041fd04eb2cfb3a5b94f73ffc8168c150397bce99153de7c3e08fedf648bf9eba9a3b753fb9c3e4d262e1f5e2e8d691459782196844dbcdd98bdd9fde42690bd4dec54100733b0caf91465b3a4b8bc01007003c810df6f0d79a5b6d454c2223888e92880e0cc45a31125bac9f0c98487dfc5157af0448d4a6ace702719547bea978e2c573cafc0063d266281e32af6e2f503428b34b2ca0b883acd6724fc3a08c08fa1aabec6062315616836a5d34a2c1238285f8a506fce66bec112d925f92a1479dbb287ae4a7d2f2e65ea6c21277e1bd86aa86b8138d28492c201eb4fa64fb23021451d206e99bae29d76fb55bdebdfd554a1647a11376f5eae117035e97a59740a46f27da67d64cc8d5d9c10f4af673633c4e4a48f3d2bd11d0f624c01a29ce2815b9a54c49da374f012c75004dd4c7e9dd402e11820d6f366d74e63c1757400bdfdc2bb91f5990a438888725b517e8938ba9cce6acced0f8de20a6ac14029f0b31463b176047feaade9b3b5e95786aa461a00422ef1035980ed3872cddbfc214a8996118a95a0ca2a78ea78de41800be3dcbd29b2028d4886c8271e16dda92372c97c4f3efba7165554c4bc16b920fb0db10573b5dc46fdd0c1bc16f741151760a332bf723103ba87fa024e9b52f828fa97f60592f33c07336037f5d9c8704533c738048d3f818d6654bd488b9a6e8f642e2e921c3c22c7c043c0113c1fec9c44c62cde9f91a87ff1a59e8131feb5d070e1c010b04dc7d3ee0608a67418cc4b5332f84072e4d3d0c58b60d7b505036a191b24f85e2348f77ce761f9646c34d58d34d8aa44e8dcb666553a8ee4951fb42530d7324f194d9c363dafd55460714ed7ea894f74241c610e55f8967fc4d7e5da4568422eb50d7dc91275aca092fb3efd42b63e8f541f22b8ae7ba28626531db7ced752ee225279c80f9f7b352c2dd51bea0f6ef4ab17f2fc2a81e31f164eadec", &(0x7f0000001240)=0x1000, &(0x7f0000001280)="b7a05deaaa17e7f49ea3497cee7d4b17c70100c6c08b409dd6072b9151e7bf09dd0074e2a04e7e3932e0247f3746b60cd0199e89168a2dd7cecbb2d068790310157a4ef48a51f8504c2a0f3a23f534b6329e8afd66160a3e4f5714fcce", 0x5d) 1.973128ms ago: executing program 7 (id=8): setegid(0xffffffffffffffff) setgroups(0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x210, &(0x7f00000a4000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x1b2, 0x2}, 0x9, 0x0, 0x0, 0x9, 0x0, 0x5, 0x40000000004, 0x9, 0x4, 0x9, 0x80000dcf}) seteuid(0xffffffffffffffff) shmat(r0, &(0x7f0000002000/0x2000)=nil, 0x3000) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff048ab035a09086dd6f75580300383a000055e6b7fb03000015a3cc1000000000fe8000000000000000000000000000aa8400"]) setrlimit(0x8, &(0x7f0000000100)={0x7, 0x1ad}) 1.083004ms ago: executing program 6 (id=13): r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x1ca) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x2011, r0, 0x0) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x2011, r0, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000100)) (async) ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000100)) open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) read$audio(r0, &(0x7f0000000140)=""/238, 0xee) (async) read$audio(r0, &(0x7f0000000140)=""/238, 0xee) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x2011, r1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x28dd) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="40650121", 0x1a}], 0x1, 0x9ec) r2 = semget$private(0x0, 0x1, 0x62) getgroups(0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async) getgroups(0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000300)={{0xffffffffffffffff, r3, 0x0, r4, 0x146, 0xfffa}, 0x0, 0x4, 0x0, 0x0, 0x6a1fdb56, 0x0, 0x4000005c}) setresgid(r5, r4, 0x0) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) semop(r2, &(0x7f0000000380)=[{0x4, 0x10, 0x1000}], 0x1) r6 = syz_open_pts() ioctl$TIOCDRAIN(r6, 0x2000745e) 306.605µs ago: executing program 2 (id=14): mknod(&(0x7f0000000280)='./file1\x00', 0x100, 0x28e1) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x30, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4, 0x2010, r0, 0x2000) r1 = socket$inet6(0x18, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x3e, &(0x7f0000000040)={0x0, 0x0, 0x9b22}, 0x6) getsid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = kqueue1(0x10004) kevent(r3, &(0x7f0000000200)=[{{r2}, 0xfffffffffffffffe, 0x11, 0x1, 0x8, 0x5}], 0x1, &(0x7f0000000240), 0x45, 0x0) openat$vnd(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) sysctl$kern(&(0x7f0000000340)={0x1, 0x55}, 0x1, 0x0, 0x0, 0x0, 0x39) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$vfs_nfs(&(0x7f0000000580)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) seteuid(0xffffffffffffffff) sysctl$kern(&(0x7f00000005c0)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$vfs_nfs(&(0x7f0000000600)={0xa, 0x2, 0x3}, 0x3, &(0x7f0000000640), 0x0, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000380)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="fd0a05003692cf000000fa010100009c4dee8b9892fc84a3ace813e398013f2ccb81fdcd32abf7bbf495d1da4b89456bf8bb743ad83364acb3435e49c76f0cbde2", 0x41) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r4, 0x8004667d, &(0x7f00000004c0)={0x0}) r5 = socket$inet(0x2, 0x3, 0x2) getpeername$inet6(r1, &(0x7f0000000400), &(0x7f0000000440)=0x1c) r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) ioctl$LIOCSFD(r6, 0x80046c7f, &(0x7f0000000540)=r5) setsockopt(r2, 0x0, 0x0, &(0x7f0000000140)="9a355644fda58446", 0x8) setsockopt(r5, 0x0, 0xc, &(0x7f0000000180)="9a355644fda58446", 0x8) socket$inet(0x2, 0x3, 0xfe) 0s ago: executing program 6 (id=15): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$WSKBDIO_GETBELL(r0, 0x40105704, &(0x7f00000001c0)) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSKBDIO_GETENCODING(r1, 0x4004570f, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. pckbd_enable: command error witness: lock order reversal: 1st 0xffffffff8520a7d8 pf_lock (pf_lock) 2nd 0xffffffff8503b298 netlock (netlock) lock order [1] pf_lock (pf_lock) -> [2] netlock (netlock) #0 rw_do_enter_write+0xb8 #1 uvn_io+0x79b #2 uvn_get+0x4ba #3 uvm_fault_lower_io+0x602 #4 uvm_fault_lower+0x3e0 #5 uvm_fault+0x4c5 #6 kpageflttrap+0x427 #7 kerntrap+0x1b8 #8 alltraps_kern_meltdown+0x7b #9 _copyin+0x50 #10 pfioctl+0x1702 #11 VOP_IOCTL+0x163 #12 vn_ioctl+0x1d6 #13 sys_ioctl+0x873 #14 syscall+0x118e #15 Xsyscall+0x128 lock order [2] netlock (netlock) -> [1] pf_lock (pf_lock) #0 rw_do_enter_write+0xb8 #1 pfi_attach_ifgroup+0x2e #2 if_addgroup+0x3b3 #3 if_attachsetup+0xe2 #4 if_attach+0xa6 #5 vio_attach+0x20d6 #6 config_attach+0x6a5 #7 virtio_pci_attach+0x7ce #8 config_attach+0x6a5 #9 pci_probe_device+0xde4 #10 pci_enumerate_bus+0x49a #11 config_attach+0x6a5 #12 acpipci_attach_bus+0x51f #13 acpipci_attach_busses+0x9b #14 mainbus_attach+0x42b #15 config_attach+0x6a5 #16 config_rootfound+0x295 #17 cpu_configure+0x3b #18 main+0x731 Stopped at db_enter+0x17: popq %rbp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan kasan: no report recorded this boot ddb{1}> trace db_enter() at db_enter+0x17 witness_checkorder(ffffffff8503b298,9,0) at witness_checkorder+0x17f2 rw_do_enter_write(ffffffff8503b280,0) at rw_do_enter_write+0xb8 uvn_io(ffff800001ba2d80,ffff800039acdd20,1,202,0) at uvn_io+0x79b uvn_get(ffff800001ba2d80,2000,ffff800039acde80,ffff800039acdea0,0,1,ffff800000db3400,ffffffff84e1d220) at uvn_get+0x4ba uvm_fault_lower_io(ffff800039ace100,ffff800039ace160,ffff800039acdfa0,ffff800039acdfc0) at uvm_fault_lower_io+0x602 uvm_fault_lower(ffff800039ace100,ffff800039ace160,ffff800039ace280) at uvm_fault_lower+0x3e0 uvm_fault(ffff800001bc4b90,200000001000,0,1) at uvm_fault+0x4c5 kpageflttrap(ffff800039ace480,200000001000) at kpageflttrap+0x427 kerntrap(ffff800039ace480) at kerntrap+0x1b8 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x50 pfioctl(24900,c4504441,ffff8000017a9000,1,ffff80003bb7f4e8) at pfioctl+0x1702 VOP_IOCTL(ffff800001c18958,c4504441,ffff8000017a9000,1,ffff800000119410,ffff80003bb7f4e8) at VOP_IOCTL+0x163 vn_ioctl(ffff800001c592c8,c4504441,ffff8000017a9000,ffff80003bb7f4e8) at vn_ioctl+0x1d6 sys_ioctl(ffff80003bb7f4e8,ffff800039acf580,ffff800039acf4e0) at sys_ioctl+0x873 syscall(ffff800039acf580) at syscall+0x118e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8c7379c8d90, count: -18 ddb{1}> show registers rdi 0x80000 acpi_pdirpa+0x6be71 rsi 0 rbp 0xffff800039acd9a0 rbx 0xffffffff84a9ea20 .str rdx 0xffff80000015fc80 rcx 0x7ffff acpi_pdirpa+0x6be70 rax 0xffff80002ca7c000 r8 0xffff8080051f2800 r9 0x39acd580 r10 0x11 r11 0xffffffff8226a080 x86_bus_space_io_read_1 r12 0xffffffff84833720 .compoundliteral.6 r13 0xffffffff8520a7d8 pf_lock+0x18 r14 0x3 r15 0xffffffff84833700 .str.5 rip 0xffffffff81169c17 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff800039acd9a0 ss 0x10 db_enter+0x17: popq %rbp ddb{1}> show proc PROC (syz-executor) tid=480818 pid=80327 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=62, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003bb7e7f0,0xffff80003bb7f790 process=0xffff800029a78ea0 user=0xffff800039ac4000, vmspace=0xffff800001bc4b90 estcpu=12, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 40758 10501 42579 0 2 0 0 syz-executor 40758 191229 42579 0 2 0 0x4000000 syz-executor 97481 323682 24058 0 2 0x2 0 sh 17918 501413 14892 0 2 0x10 0 syz-executor 17918 400624 14892 0 2 0x10 0x4000000 syz-executor 14697 151813 1599 0 2 0 0 syz-executor 60884 101316 75285 0 2 0x10 0 syz-executor 60884 333412 75285 0 3 0x10 0x4000080 ttyout syz-executor 93158 117518 11054 0 2 0x2 0 sh 88885 161771 19358 0 2 0x10 0 syz-executor 88885 363285 19358 0 3 0x10 0x4000080 kqsel syz-executor 88885 346954 19358 0 3 0x10 0x4000080 fsleep syz-executor 80327 139703 44134 0 7 0 0 syz-executor *80327 480818 44134 0 7 0 0x4000000 syz-executor 24058 66412 53959 0 3 0x2 0x80 wait syz-executor 1599 212824 53959 0 2 0x2 0 syz-executor 42579 11933 53959 0 3 0x2 0x80 nanoslp syz-executor 11054 289064 53959 0 3 0x2 0x80 wait syz-executor 44134 491665 53959 0 2 0x2 0xc80 syz-executor 14892 369755 53959 0 3 0x2 0x80 nanoslp syz-executor 19358 183865 53959 0 2 0x2 0xc80 syz-executor 75285 242780 53959 0 2 0x2 0xc80 syz-executor 53959 317297 15863 0 2 0x2 0 syz-executor 15863 335663 94811 0 3 0x100002 0x88 sigsusp ksh 94811 114208 49762 0 3 0x10 0x88 kqread sshd-session 49762 134366 25283 0 3 0x12 0x80 kqread sshd-session 65175 231893 1 0 3 0x100003 0x80 ttyin getty 25283 495675 1 0 3 0 0x88 kqread sshd 745 405480 42068 74 3 0x1100012 0x80 bpf pflogd 42068 283109 1 0 3 0 0x80 sbwait pflogd 41538 498813 99315 73 3 0x1100010 0x80 kqread syslogd 99315 245866 1 0 3 0x100002 0x80 sbwait syslogd-parent 40032 288772 1 0 3 0x100000 0x80 kqread resolvd 40504 313809 92589 77 3 0x100012 0x80 kqread dhcpleased 51469 212477 92589 77 3 0x100012 0x80 kqread dhcpleased 92589 4746 1 0 3 0 0x80 kqread dhcpleased 6434 23694 0 0 3 0x14000 0x200 bored smr 4071 237129 0 0 2 0x14000 0x200 zerothread 34461 245224 0 0 3 0x14000 0x200 aiodoned aiodoned 6160 157870 0 0 3 0x14000 0x200 syncer update 63079 290828 0 0 3 0x14000 0x200 cleaner cleaner 36410 438033 0 0 3 0x14000 0x200 reaper reaper 51548 455382 0 0 3 0x14000 0x200 pgdaemon pagedaemon 24616 273499 0 0 3 0x14000 0x200 bored viomb 69636 196834 0 0 3 0x14000 0x40000200 acpi0 acpi0 86271 159038 0 0 3 0x14000 0x40000200 idle1 30061 222694 0 0 3 0x14000 0x200 bored softnet1 48282 339480 0 0 2 0x14000 0x200 softnet0 73937 227954 0 0 3 0x14000 0x200 bored systqmp 68803 364626 0 0 3 0x14000 0x200 bored systq 76558 492411 0 0 3 0x14000 0x200 tmoslp softclockmp 77884 8215 0 0 3 0x14000 0x40000200 tmoslp softclock 56717 365332 0 0 3 0x14000 0x40000200 idle0 1 134652 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 80327 (syz-executor) thread 0xffff80003bb7f4e8 (480818) exclusive rwlock pf_lock r = 0 (0xffffffff8520a7d8) #0 witness_lock+0x534 #1 rw_do_enter_write+0x4e4 #2 pfioctl+0x1689 #3 VOP_IOCTL+0x163 #4 vn_ioctl+0x1d6 #5 sys_ioctl+0x873 #6 syscall+0x118e #7 Xsyscall+0x128 exclusive rwlock pfioctl_rw r = 0 (0xffffffff8520a8d8) #0 witness_lock+0x534 #1 rw_do_enter_write+0x4e4 #2 pfioctl+0x273 #3 VOP_IOCTL+0x163 #4 vn_ioctl+0x1d6 #5 sys_ioctl+0x873 #6 syscall+0x118e #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85602680) #0 witness_lock+0x534 #1 vn_ioctl+0xd2 #2 sys_ioctl+0x873 #3 syscall+0x118e #4 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11090 12270K 12394K 166960K 12183 0 pcb 32 32K 32K 166960K 32 0 rtable 261 25K 27K 166960K 335 0 pf 36 22K 26K 166960K 47 0 ifaddr 44 12K 12K 166960K 46 0 ifgroup 59 2K 2K 166960K 59 0 sysctl 1 1K 13K 166960K 5 0 counters 72 43K 43K 166960K 72 0 ioctlops 8 7K 194K 166960K 1488 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1403 90K 90K 166960K 1474 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 2K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 413K 166960K 11964 0 file desc 20 68K 117K 166960K 149 0 proc 105 130K 198K 166960K 558 0 subproc 81 10K 10K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 4 0K 0K 166960K 5 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 37 263K 263K 166960K 37 0 exec 28 7K 18K 166960K 390 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 14 124K 124K 166960K 15 0 UVM amap 511 313K 340K 166960K 3185 0 UVM aobj 3 4K 4K 166960K 3 0 pinsyscall 144 252K 383K 166960K 1288 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 29 2K 2K 166960K 29 0 temp 407 9316K 9469K 166960K 3635 0 kqueue 14 44K 84K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 32 0 29 1 0 1 1 0 8 0 rtentry 176 110 0 12 5 0 5 5 0 8 0 unpcb 144 46 0 29 1 0 1 1 0 8 0 syncache 336 4 0 4 2 1 1 1 0 8 1 tcpcb 736 9 0 4 1 0 1 1 0 8 0 arp 136 18 0 2 1 0 1 1 0 8 0 inpcb 328 135 0 125 6 0 6 6 0 8 5 nd6 152 23 0 3 1 0 1 1 0 8 0 kcovpl 48 9 0 1 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 30 0 0 1 0 1 1 0 8 0 pfstkey 128 30 0 0 1 0 1 1 0 8 0 pfstate 448 30 0 0 4 0 4 4 0 8 0 pfrule 1360 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 44 28 0 28 28 0 8 1 art_table 40 453 0 44 5 0 5 5 0 8 0 art_node 32 110 0 21 1 0 1 1 0 8 0 semapl 72 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1584 0 112 93 0 93 93 0 8 0 ffsino 296 1584 0 112 114 0 114 114 0 8 0 nchpl 144 1795 0 89 64 0 64 64 0 8 0 vnodes 216 1781 0 0 99 0 99 99 0 8 0 namei 1024 6283 0 6283 3 1 2 2 0 8 2 percpumem 16 52 0 1 1 0 1 1 0 8 0 kstatmem 264 29 0 2 2 0 2 2 0 8 0 scxspl 216 6734 0 6734 3 2 1 2 1 8 1 plimitpl 152 31 0 14 1 0 1 1 0 8 0 sigapl 424 451 0 403 7 0 7 7 0 8 1 knotepl 120 57 0 0 2 0 2 2 0 8 0 kqueuepl 224 27 0 15 1 0 1 1 0 8 0 pipepl 344 131 0 104 3 0 3 3 0 8 0 fdescpl 528 435 0 403 3 0 3 3 0 8 0 filepl 160 1740 0 1518 16 0 16 16 0 8 6 lockfpl 104 12 0 8 1 0 1 1 0 8 0 lockfspl 48 8 0 4 1 0 1 1 0 8 0 sessionpl 144 25 0 16 1 0 1 1 0 8 0 pgrppl 48 34 0 17 1 0 1 1 0 8 0 ucredpl 104 99 0 82 1 0 1 1 0 8 0 zombiepl 144 403 0 403 1 0 1 1 0 8 1 processpl 1240 451 0 403 5 0 5 5 0 8 1 procpl 664 476 0 422 6 0 6 6 0 8 1 sockpl 752 214 0 184 10 0 10 10 0 8 7 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 115 0 0 15 0 15 15 0 8 0 mcl2k 2048 18 0 0 3 0 3 3 0 8 0 mextrefs 64 20 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 183 0 0 11 0 11 11 0 8 0 bufpl 272 2351 0 93 151 0 151 151 0 8 0 anonpl 32 3833 0 0 31 0 31 31 0 222 0 amapchunkpl 152 9035 0 8628 30 0 30 30 0 158 13 amappl16 200 1942 0 1927 5 2 3 5 0 8 2 amappl15 192 7 0 7 2 2 0 1 0 8 0 amappl14 184 416 0 415 1 0 1 1 0 8 0 amappl13 176 115 0 103 1 0 1 1 0 8 0 amappl12 168 678 0 650 2 0 2 2 0 8 0 amappl11 160 9 0 9 1 1 0 1 0 8 0 amappl10 152 67 0 55 1 0 1 1 0 8 0 amappl9 144 286 0 286 1 1 0 1 0 8 0 amappl8 136 117 0 115 1 0 1 1 0 8 0 amappl7 128 144 0 131 1 0 1 1 0 8 0 amappl6 120 115 0 112 1 0 1 1 0 8 0 amappl5 112 151 0 142 1 0 1 1 0 8 0 amappl4 104 295 0 277 1 0 1 1 0 8 0 amappl3 96 1568 0 1468 3 0 3 3 0 8 0 amappl2 88 443 0 384 2 0 2 2 0 8 0 amappl1 80 10239 0 9647 14 0 14 14 0 8 0 amappl 88 2501 0 2358 4 0 4 4 0 92 0 uvmvnodes 80 103 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 435 0 403 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 435 0 403 1 0 1 1 0 8 0 vmmpekpl 168 5298 0 5267 2 0 2 2 0 8 0 vmmpepl 168 37958 0 36127 83 0 83 83 0 357 1 vmsppl 488 434 0 403 6 1 5 5 0 8 1 rwobjpl 80 14495 0 13513 23 0 23 23 0 8 0 pdppl 4096 879 0 806 91 18 73 85 0 8 0 pvpl 32 8783 0 0 72 1 71 71 0 265 0 pmappl 256 434 0 403 4 1 3 3 0 8 0 extentpl 40 47 0 29 1 0 1 1 0 8 0 phpool 120 416 0 24 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1f: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff85214ff0) at x86_ipi_db+0x1f x86_ipi_handler() at x86_ipi_handler+0xfd Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x28 __mp_lock(ffffffff85601e80) at __mp_lock+0x290 intr_handler(ffff80003bb0f470,ffff800000162480) at intr_handler+0x113 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff85601e80) at __mp_lock+0x272 softintr_dispatch(0) at softintr_dispatch+0x250 dosoftint(0) at dosoftint+0x7b Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x72bd8fbaeb60, count: -11 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x17: popq %rbp ddb{1}> trace db_enter() at db_enter+0x17 witness_checkorder(ffffffff8503b298,9,0) at witness_checkorder+0x17f2 rw_do_enter_write(ffffffff8503b280,0) at rw_do_enter_write+0xb8 uvn_io(ffff800001ba2d80,ffff800039acdd20,1,202,0) at uvn_io+0x79b uvn_get(ffff800001ba2d80,2000,ffff800039acde80,ffff800039acdea0,0,1,ffff800000db3400,ffffffff84e1d220) at uvn_get+0x4ba uvm_fault_lower_io(ffff800039ace100,ffff800039ace160,ffff800039acdfa0,ffff800039acdfc0) at uvm_fault_lower_io+0x602 uvm_fault_lower(ffff800039ace100,ffff800039ace160,ffff800039ace280) at uvm_fault_lower+0x3e0 uvm_fault(ffff800001bc4b90,200000001000,0,1) at uvm_fault+0x4c5 kpageflttrap(ffff800039ace480,200000001000) at kpageflttrap+0x427 kerntrap(ffff800039ace480) at kerntrap+0x1b8 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x50 pfioctl(24900,c4504441,ffff8000017a9000,1,ffff80003bb7f4e8) at pfioctl+0x1702 VOP_IOCTL(ffff800001c18958,c4504441,ffff8000017a9000,1,ffff800000119410,ffff80003bb7f4e8) at VOP_IOCTL+0x163 vn_ioctl(ffff800001c592c8,c4504441,ffff8000017a9000,ffff80003bb7f4e8) at vn_ioctl+0x1d6 sys_ioctl(ffff80003bb7f4e8,ffff800039acf580,ffff800039acf4e0) at sys_ioctl+0x873 syscall(ffff800039acf580) at syscall+0x118e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8c7379c8d90, count: -18