last executing test programs: 738.205341ms ago: executing program 4 (id=5): r0 = socket(0x18, 0x3, 0x0) (async, rerun: 32) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0x80047476, &(0x7f0000000080)={0x401, [{0x2, 0x101}, {0x2, 0x11}, {0x2, 0xffffffff}, {0x3, 0x5}, {0x3, 0xd98}, {0x2, 0x4}, {0x1}, {0x0, 0x8}, {0x1, 0x5}, {0x2, 0x80000000}, {0x1, 0x7f}, {0x1, 0x6}, {0x3, 0x3}, {0x3, 0x3}, {0x2, 0x200}, {0x1, 0xa224}, {0x1, 0xf1}, {0x3, 0xb4}, {0x2, 0xdc}, {0x3, 0x2}, {0x3, 0x7}, {0x3, 0xffffffff}, {0x2, 0x9f5}, {0x3, 0x40}, {0x1, 0x10000}, {0x2, 0xaec}, {0x1, 0xffff}, {0x2, 0x80000001}, {0x1, 0x3e33}, {0x3, 0x372002ea}, {0x1, 0x83ff}, {0x1, 0x4}]}) (rerun: 32) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async) r1 = kqueue() ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x0, 0x0}) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async, rerun: 64) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 64) writev(r3, &(0x7f0000000240)=[{0x0}], 0x1) (async, rerun: 32) getsockname(r0, &(0x7f0000000000)=@in6, &(0x7f0000000040)=0x1c) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) 713.354545ms ago: executing program 2 (id=3): r0 = socket$inet6(0x18, 0x1000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) r1 = accept$inet6(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) accept4(r1, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x8000) (async) r2 = accept4(r1, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8, 0x8000) accept4(r2, &(0x7f0000000140)=@un=@abs, &(0x7f00000002c0)=0x8, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x1000, 0x80000000, {[0x7248, 0x0, 0x4787, 0xf04, 0x8001, 0x20000000003, 0x6, 0xffffffffffffffff, 0x0, 0x2eff, 0x6, 0x6, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0x3, 0x7fff, 0x401, 0x5, 0x99, 0x26520a67, 0x6, 0x8, 0x0, 0x4], [0x200000005ad8, 0xad41, 0x7, 0x10000000000, 0xffffffffffffffff, 0x5, 0xffffffffffffdffe], [0x0, 0xcc9, 0xffff, 0x6, 0x2, 0x6], [{0x0, 0x6, 0xffffffff, 0xb961}, {0xa, 0x4, 0x3, 0x100000000}, {0x0, 0xffffffff, 0xfffffffe, 0x48}, {0x3, 0x100, 0x200008, 0xffffffffffffffff}, {0x0, 0xffffffff, 0x9, 0x1}, {0x0, 0x2106, 0x0, 0x2000000000000000}, {0x4, 0x4000000, 0x1, 0x1}, {0x4, 0x8000003, 0x0, 0xfff}], {0x8002, 0x6, 0x8}, {0x4, 0x101, 0x1, 0x3ff}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x1000, 0x80000000, {[0x7248, 0x0, 0x4787, 0xf04, 0x8001, 0x20000000003, 0x6, 0xffffffffffffffff, 0x0, 0x2eff, 0x6, 0x6, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0x3, 0x7fff, 0x401, 0x5, 0x99, 0x26520a67, 0x6, 0x8, 0x0, 0x4], [0x200000005ad8, 0xad41, 0x7, 0x10000000000, 0xffffffffffffffff, 0x5, 0xffffffffffffdffe], [0x0, 0xcc9, 0xffff, 0x6, 0x2, 0x6], [{0x0, 0x6, 0xffffffff, 0xb961}, {0xa, 0x4, 0x3, 0x100000000}, {0x0, 0xffffffff, 0xfffffffe, 0x48}, {0x3, 0x100, 0x200008, 0xffffffffffffffff}, {0x0, 0xffffffff, 0x9, 0x1}, {0x0, 0x2106, 0x0, 0x2000000000000000}, {0x4, 0x4000000, 0x1, 0x1}, {0x4, 0x8000003, 0x0, 0xfff}], {0x8002, 0x6, 0x8}, {0x4, 0x101, 0x1, 0x3ff}}}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x44, 0x4, 0x1, 0x410}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x44, 0x4, 0x1, 0x410}]}) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000300)="00000001", 0xffffff0a}], 0x1) (async) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000300)="00000001", 0xffffff0a}], 0x1) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000001300)="989f098081eb79063ac0d99e9afc95cb9483643238", 0x15}, {&(0x7f0000000080)="e8c4d484d2", 0x5}], 0x2, 0xfffffffffffffffc) (async) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000001300)="989f098081eb79063ac0d99e9afc95cb9483643238", 0x15}, {&(0x7f0000000080)="e8c4d484d2", 0x5}], 0x2, 0xfffffffffffffffc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x53, 0x4, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x4, 0xb000000000004000, 0xfffffffffffffff9, 0x807}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) futimes(r1, &(0x7f0000000280)=[{0xcb0, 0xff}, {0x8000000000000000, 0x9}]) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt(r6, 0x6, 0x10, &(0x7f0000000000), 0x0) (async) setsockopt(r6, 0x6, 0x10, &(0x7f0000000000), 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d) ioctl$BIOCSETIF(r5, 0xc0785101, &(0x7f0000000400)={'tap', 0x0}) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="369d9162185e", @local, [{[], {0x8100, 0x0, 0x0, 0x3}}], {@generic={0x88a8}}}) sysctl$kern(&(0x7f00000005c0)={0x1, 0x58}, 0x2, &(0x7f0000000600), 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x63, 0x0, 0xffcf) 711.626892ms ago: executing program 7 (id=8): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = dup(r0) fcntl$getflags(r1, 0x3) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x812, 0xffffffffffffff9c, 0x7fffffffffffffff) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) (async) r5 = semget$private(0x0, 0x0, 0x710) semctl$GETPID(r5, 0x4, 0x4, &(0x7f00000000c0)=""/96) semctl$SETVAL(r5, 0x0, 0x8, &(0x7f0000000140)=0x9) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x5, 0xffffffffffffff00}, {0x3, 0x7fffffffffffffff}}) setresgid(r4, r4, r4) r6 = socket(0x6, 0x4, 0xf) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x4010, r0, 0x100000000) (async) ppoll(&(0x7f0000000200)=[{r6, 0x80}, {r1, 0x2}, {r0, 0x4}], 0x3, &(0x7f0000000240)={0x200, 0x7fffffff}, &(0x7f0000000280)={0xe}) (async) mprotect(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x2) (async, rerun: 32) setpgid(r2, 0xffffffffffffffff) (rerun: 32) r7 = semget$private(0x0, 0x3, 0x110) semctl$GETZCNT(r7, 0x2, 0x7, &(0x7f00000002c0)=""/69) (async) r8 = msgget(0x2, 0x5f6) r9 = getgid() (async, rerun: 64) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x0) (rerun: 64) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000400)={{r3, r9, r3, r11, 0x1, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0x8, 0x7fffffff, 0x140000, r2, r2, 0xc, 0x0, 0xece, 0x0, 0x9}) (async) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000004c0)={{r3, r9, r3, r9, 0x36, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x1ff}) semctl$GETPID(r5, 0x2, 0x4, &(0x7f0000000540)=""/140) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000600)={0x1, 0x4}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000640)={0x0, 0x8c8, 0x4, 0x32314142, 0x1, [0x0, 0x0, 0x0, 0x0], [0x2, 0x1, 0x8, 0x9], [0x0, 0x3, 0x5a3dd512, 0x4], [0x7f, 0xe3c9, 0xa, 0xb]}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x80086409, &(0x7f00000006c0)={r12, 0xf71}) (async) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f00000007c0)={{r3, r13, r3, r10, 0x34, 0xf4d9, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x2}) (async, rerun: 64) kevent(r1, &(0x7f0000000840)=[{{r0}, 0xfffffffffffffff8, 0x10, 0x4, 0x1, 0x7}], 0x1, &(0x7f0000000880)=[{{r1}, 0xfffffffffffffffa, 0x0, 0x1, 0x97a5, 0x7}, {{r0}, 0xfffffffffffffffb, 0x12, 0x2, 0xe03, 0x5}, {{r0}, 0xfffffffffffffffc, 0xc, 0x20000000, 0x35e, 0x1}, {{r6}, 0x8000000000000009, 0x22, 0x1, 0xf262, 0x8}], 0x800, &(0x7f0000000900)={0x2, 0x1}) (rerun: 64) kill(0x0, 0x1e) 700.932504ms ago: executing program 0 (id=1): sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) ioctl$WSDISPLAYIO_GETEMULTYPE(0xffffffffffffffff, 0x80184901, &(0x7f0000000180)={0x0, './file1\x00'}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x800003, 0x1, 0x10, [{0x8b600000, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4baa, 0x9, 0x4}, {0x7, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x6, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x2, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0x1000, 0x8, 0x7ffd}, {0x3f8, 0xfefffffd, 0x1ff, 0x12}, {0x82, 0x80000000, 0xef3, 0xfffffff4}, {0x10002, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0xffffffff, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0x2, 0x3ff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x107492, "08e500", 0x20004118, 0x6}) 653.915802ms ago: executing program 0 (id=9): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r0 = socket(0x18, 0x3, 0x0) r1 = socket$inet6(0x18, 0x4001, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0x3, "fe80000400000000414a0f47a500fdff", 0xb}, 0x1c) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0x1a, &(0x7f0000000080)='\"\x00\x00\x00', 0x4) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="fffff6ffffffe04b1c561ac486ddc124b80eab080000000000000000fe8000000000000000000000000000aa"]) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r3 = open(&(0x7f0000000100)='./file0\x00', 0x100, 0x0) ioctl$FIONREAD(r3, 0x4004667f, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000780)={0x4, 0x18, 0x29, 0x7}, 0x4, 0x0, 0x0, &(0x7f0000000900), 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x80) readv(r4, &(0x7f0000002040)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1) ioctl$WSMUXIO_INJECTEVENT(r4, 0x80185760, &(0x7f0000000140)={0xd, 0x6}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x69, &(0x7f0000000040), 0x0) lseek(r5, 0x5, 0x1) r6 = kqueue() mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = getsid(0x0) fcntl$setown(r5, 0x6, r7) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r8, 0x84946466, &(0x7f0000000400)={'tap', 0x0}) kevent(r6, &(0x7f00000013c0)=[{{r8}, 0xfffffffffffffffc, 0x1, 0x2, 0xcc, 0xffffffffffffffff}], 0x8, 0x0, 0x15, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x10686, 0x0) 648.832327ms ago: executing program 3 (id=4): semget$private(0x0, 0x4, 0x0) (async) r0 = semget$private(0x0, 0x4, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x163) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000100)=0xfffffffa) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x0, 0xffffffffffffffff) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x0, 0xffffffffffffffff) truncate(&(0x7f00000003c0)='./file0\x00', 0x44002ffff) (async) truncate(&(0x7f00000003c0)='./file0\x00', 0x44002ffff) open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') socket(0x1, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) ktrace(0x0, 0x4, 0xd27d43220c7df9f, 0x0) open(0x0, 0x2, 0x0) getegid() ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) semctl$GETNCNT(r0, 0x0, 0x3, &(0x7f0000000000)=""/178) (async) semctl$GETNCNT(r0, 0x0, 0x3, &(0x7f0000000000)=""/178) 357.140878ms ago: executing program 4 (id=10): openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sysctl$hw(&(0x7f0000000280)={0x6, 0x14}, 0x2, &(0x7f0000000040)="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", &(0x7f0000000000)=0x104, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000280)={0x6, 0x14}, 0x2, &(0x7f0000000040)="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", &(0x7f0000000000)=0x104, 0x0, 0x0) 356.60547ms ago: executing program 6 (id=7): r0 = semget$private(0x0, 0xf, 0x0) r1 = socket(0x1, 0x1, 0x0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b100050300000400000000b101200000331c13fedca10500fe050000002fd3357ae30200004e3039d2d236ace5bff20b7804be38164991f7c8cf5f882b297be1c50500000051e2f0ad0900000000000c009b672f4d335c223e7d0c032bfa896443842102020000720fd18bfbb670c1f5a872c881ea6e2ec589040000008000361b1257aea8c500002002fbfe0c230000a37f50b60900000008e371a3f83400"/177, 0xb1, 0x2, 0x0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) kill(0xffffffffffffffff, 0x6) ioctl$DIOCCLRIFFLAG(r3, 0xc028445a, &(0x7f0000000180)={'./file0aaaaaaaaa', 0x0, 0xffff, 0x20000003, 0x1, 0x1}) r4 = syz_open_pts() r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000400)={0x5, 0xdfc6, 0xfffffffe, 0x90, "ff0600000002586c000000d200000000000c00", 0x45, 0x40000001}) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_pts() ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000000)={0x9, 0x97, 0x9, 0xd122ec2, "a07f64e1eb4a3bc6e3a80189f661ae0a2980e716", 0x28002, 0x3fb}) ioctl$TIOCSTAT(r5, 0x20007465) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000100)=""/49, 0x26}], 0x1000000000000274) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaa\x00', 0x8) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0x8, 0x7, 0x4}, {0x7, 0x9, 0x80, 0x9}]}) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, 0xc) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) fstat(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{r7, r8, r9, 0x0, 0x82, 0x1ff, 0x0, 0x0, 0x7}, 0x0, 0x101, 0x0, 0x0, 0x9, 0x0, 0x3}) unveil(0x0, &(0x7f0000000140)='x\x00') closefrom(r1) semctl$SETALL(r0, 0x0, 0x9, &(0x7f00000000c0)) 356.174167ms ago: executing program 5 (id=6): r0 = socket$inet(0x2, 0x8003, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x1, 0x69, 0x1d, 0x5], 0x5, 0x10000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000080)={0x0, 0xfffff785, 0x4, 0x3df9, 0xf, 0xd, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000000c0)={0x0, 0x81, 0x3, 0x0, 0x2, [0x0], [0x3, 0x80, 0x0, 0x6], [0x2, 0x5, 0x100, 0x1], [0xc5b, 0x2, 0x2, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000140)={0x0, 0x8, 0x7fffffff, 0x20203452, 0x0, [0x0, 0x0, r2, r3], [], [0xcee, 0x37, 0x9, 0x144], [0xfffffffffffffffd, 0x3, 0x80000001, 0x6]}) setsockopt(r0, 0x0, 0x1f, 0x0, 0x0) 355.92964ms ago: executing program 7 (id=11): syz_emit_ethernet(0xe, &(0x7f0000002800)={@local, @local, [], {@generic={0x8864}}}) 351.13065ms ago: executing program 4 (id=12): ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000cc0)={0x3, &(0x7f0000000c80)=[{0x3, 0xf, 0x0, 0xffffffff}, {0xfff, 0x4, 0x3}, {0x7, 0x0, 0x9, 0x7fffffff}]}) r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000002700)={0x9, 0x0, 0xe2e4, 0xb13, "97241ee2a30a72dc0c1a8917ff840866d11da445", 0x4}) syz_open_pts() r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@in6, &(0x7f0000000a80)=0x1c) futimens(r1, &(0x7f0000000c40)=[{0x2, 0x46c}, {0x7, 0xe}]) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x14, 0x3, 0x1, 0xfffff804}]}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0caa94a4ffffaaaaaaaaaabb0800458008000000000080019078ffff6b76f61f89de194b90784cf9f5a3"]) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x80046471, &(0x7f0000000400)={'tap', 0x0}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) kill(0xffffffffffffffff, 0x6) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x10, 0x0, {[0xfffefbffffbffff6, 0x1, 0x2, 0x5, 0x2, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x100000000004, 0x1000000009, 0x3, 0xe70, 0xff, 0x8000000, 0x20000000001000a8, 0x5, 0x6], [0x80000001, 0x80000001, 0xfffffffffffffffb, 0x8000fffffffd, 0x100, 0x3ff, 0xfffffffffffffffa, 0x2, 0x6, 0xffffffffffffffc5], [0xfffffffffffffffa, 0x2, 0x3, 0x3, 0xfffffffffbffefff, 0x11006, 0xfffffffffffffffe], [0x100, 0x8, 0x9, 0x100000000, 0xffffffffffefffff, 0x1], [{0x0, 0x5, 0x7fff, 0x7}, {0xfffc, 0x0, 0xffffffff, 0x1}, {0xfffd, 0x100, 0x5bec, 0x811}, {0x3, 0x800001, 0x403, 0x80000003}, {0xd, 0xfffffffe, 0x0, 0xa000000}, {0x5, 0x5, 0x3fffe, 0x9}, {0x0, 0x201, 0x7fffffff, 0x260}, {0x0, 0xfffffe00, 0x0, 0x6}], {0x1ffc, 0x1000001, 0x10000}, {0x8, 0x80000001, 0x8, 0x80}}}) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) r5 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) fcntl$getown(r5, 0x5) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) select(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$BIOCSRTIMEOUT(r6, 0x8010426d, &(0x7f0000000d80)={0xc000000, 0x4}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00", 0x2) socket(0x1, 0x0, 0x5) readv(r5, &(0x7f0000000e00)=[{&(0x7f0000000ac0)=""/167, 0xa7}, {&(0x7f0000000b80)=""/140, 0x8c}, {0x0}, {&(0x7f0000000d00)=""/45, 0x2d}, {0x0}], 0x5) 350.098362ms ago: executing program 5 (id=13): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f00000001c0)={{'./file0\x00', './file0\x00', 0x40, 0x2}, 0x0, 0x0, 0x0, 0x1, 0x9, 0x2, 0x1, 0x4, 0x401}) (async, rerun: 64) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (rerun: 64) 348.937061ms ago: executing program 5 (id=14): r0 = socket$inet6(0x18, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) r1 = socket$inet6(0x18, 0x1, 0x6) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$DIOCRCLRTSTATS(r2, 0xc4504441, &(0x7f00000013c0)={{'./file0\x00', './file0\x00', 0x1, 0x5}, 0x0, 0xfffffffe, 0x0, 0x6, 0x280, 0x8, 0x2, 0x68, 0x3}) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt(r3, 0x6, 0x4, &(0x7f0000002480)="d518fb38", 0x4) setsockopt(r3, 0x6, 0x8, &(0x7f0000000140)="70830bb851", 0x5) bind$inet6(r1, &(0x7f0000000100)={0x1c, 0x18, 0x1, 0x101, "0000000000000000000085e387560600", 0x2f}, 0x1c) 2.791928ms ago: executing program 5 (id=15): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x1, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x7fffffff, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0xc, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11003, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0x10001}, {0x0, 0x2, 0x0, 0xc}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xffffdffc, 0x9}], {0x2000, 0x7, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) (async) r0 = kqueue() fcntl$setflags(r0, 0x2, 0x1) (async) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 1.596343ms ago: executing program 5 (id=16): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) sysctl$hw(&(0x7f0000000280)={0x6, 0x19}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) getgroups(0x400001d2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(r0, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r4, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003f00)={0x9, 0x3b9aca00}) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) 429.142µs ago: executing program 7 (id=17): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2c136acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc25769", 0x4d, 0x40a, 0x0, 0x0) (async) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r0, 0x40047477, &(0x7f0000003d00)={0x7ff, 0x1, 0x7}) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) 0s ago: executing program 5 (id=18): mknod(&(0x7f0000000080)='./file0\x00', 0x2950, 0x13d4) (async, rerun: 32) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async, rerun: 32) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) (async, rerun: 64) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (rerun: 64) pread(r1, &(0x7f00000000c0)="3cd15db7", 0x4, 0x400000101) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$BIOCIMMEDIATE(r2, 0x80044270, &(0x7f0000000000)=0xfffffffd) ioctl$BIOCSBLEN(r2, 0x4010427e, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="ff1000000000000000ffffff86dd6099cea700503a03cb697a653e336f000000500000000000ff02000000000000000000000000000104029078000003ff69acfdfb00000005fe8000000000000000000000000000b2000000000000000000003202000000000000c2047f"]) (async) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f00000001c0)=0xfffffff7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. Connection to 10.128.0.89 closed by remote host. sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code uvm_fault(0xfffff5006cf065d0, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND * 83589 54075 0 0 0x4000000 1K syz-executor 314808 92064 0 0x2 0x1 0 syz-executor ktrops(ffff80002a223a00,ffffffffffffffff,0,a0c7df9f,fffff500783aa6d0,fffff500097fd548) at ktrops+0x58 doktrace(fffff500783aa6d0,4,20c7df9f,0,ffff80002a223a00) at doktrace+0x6bd sys_ktrace(ffff80002a223a00,ffff80002a2769e0,ffff80002a276930) at sys_ktrace+0x11c syscall(ffff80002a2769e0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdc00ae3eec0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffff5006cf065d0, 0xf, 0, 1) -> e ddb{1}> show kasan No such command ddb{1}> trace ktrops(ffff80002a223a00,ffffffffffffffff,0,a0c7df9f,fffff500783aa6d0,fffff500097fd548) at ktrops+0x58 doktrace(fffff500783aa6d0,4,20c7df9f,0,ffff80002a223a00) at doktrace+0x6bd sys_ktrace(ffff80002a223a00,ffff80002a2769e0,ffff80002a276930) at sys_ktrace+0x11c syscall(ffff80002a2769e0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdc00ae3eec0, count: -5 ddb{1}> show registers rdi 0xffff80002a223a00 rsi 0xffffffffffffffff rbp 0xffff80002a2766f0 rbx 0xfffff500097fd548 rdx 0 rcx 0xffff80002a223a00 rax 0xffff80002999dff0 r8 0xfffff500783aa6d0 r9 0xfffff500097fd548 r10 0x2ed39445b053c006 r11 0x2d433a3833cc7c26 r12 0xffff80002a223a00 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0xa0c7df9f rip 0xffffffff829e38e8 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a276670 ss 0x10 ktrops+0x58: movq 0x10(%r14),%r14 ddb{1}> show proc PROC (syz-executor) tid=83589 pid=54075 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=60, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a222fa0,0xffff80002a223ca8 process=0xffff80002a37f088 user=0xffff80002a271000, vmspace=0xfffff5006cf065d0 estcpu=10, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 54087 462747 37301 0 2 0 0 syz-executor 71504 46653 41010 0 2 0x40 0 syz-executor 71599 414178 66795 0 2 0 0 syz-executor 71599 86848 66795 0 3 0 0x4000080 kqread syz-executor 71599 327566 66795 0 3 0 0x4000080 fsleep syz-executor 81701 297477 557 0 2 0 0 syz-executor 81701 127832 557 0 2 0 0x4000000 syz-executor 81701 41778 557 0 3 0 0x4000080 ttyout syz-executor 81701 471004 557 0 3 0 0x4000080 fsleep syz-executor 77894 147682 85181 0 3 0 0x80 nanoslp syz-executor 77894 283929 85181 0 2 0 0x4000000 syz-executor 77894 389092 85181 0 3 0 0x4000080 fsleep syz-executor 54075 4265 2374 0 2 0 0 syz-executor *54075 83589 2374 0 7 0 0x4000000 syz-executor 54075 8361 2374 0 3 0 0x4000080 fsleep syz-executor 37301 120722 837 0 3 0x2 0x80 nanoslp syz-executor 557 355604 837 0 3 0x2 0x80 nanoslp syz-executor 82394 375900 837 0 3 0x2 0 biowait syz-executor 66795 312453 837 0 3 0x2 0x80 nanoslp syz-executor 85181 93838 837 0 3 0x2 0x80 nanoslp syz-executor 2374 256451 837 0 3 0x2 0x80 nanoslp syz-executor 41010 227893 837 0 3 0x82 0 ppwait syz-executor 92064 314808 837 0 7 0x2 0x1 syz-executor 837 63156 1 0 2 0x2 0 syz-executor 24917 243694 0 0 3 0x14000 0x200 bored smr 6184 339259 0 0 2 0x14000 0x200 zerothread 4998 212463 0 0 3 0x14000 0x200 aiodoned aiodoned 90319 374314 0 0 3 0x14000 0x200 syncer update 75314 107062 0 0 3 0x14000 0x200 cleaner cleaner 73673 34117 0 0 3 0x14000 0x200 reaper reaper 12816 110984 0 0 3 0x14000 0x200 pgdaemon pagedaemon 74741 287040 0 0 3 0x14000 0x200 bored viomb 53980 426132 0 0 3 0x14000 0x40000200 acpi0 acpi0 15396 83476 0 0 3 0x14000 0x40000200 idle1 93585 383159 0 0 3 0x14000 0x200 bored softnet1 52166 80631 0 0 2 0x14000 0x200 softnet0 91676 196308 0 0 3 0x14000 0x200 bored systqmp 74296 284389 0 0 3 0x14000 0x200 bored systq 73120 252911 0 0 3 0x14000 0x200 tmoslp softclockmp 92746 181412 0 0 3 0x14000 0x40000200 tmoslp softclock 60234 149101 0 0 3 0x14000 0x40000200 idle0 1 372884 0 0 2 0x2 0 init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 54075 (syz-executor) thread 0xffff80002a223a00 (83589) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a1f300) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 sleep_finish+0x2d8 #3 biowait+0xc6 #4 bwrite+0x359 #5 ffs_update+0x2fe #6 ffs_truncate+0xc9b #7 ufs_inactive+0x202 #8 VOP_INACTIVE+0x104 #9 vrele+0x129 #10 ktrsettrace+0xe7 #11 ktrops+0x26c #12 doktrace+0x6bd #13 sys_ktrace+0x11c #14 syscall+0xb17 #15 Xsyscall+0x128 Process 82394 (syz-executor) thread 0xffff800045fef240 (375900) exclusive rrwlock inode r = 0 (0xfffff5007f125ca8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffff5006d80c7a8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c1 #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11045 12016K 12101K 166960K 12150 0 pcb 17 13K 14K 166960K 64 0 rtable 235 6K 6K 166960K 348 0 pf 34 17K 18K 166960K 45 0 ifaddr 43 7K 7K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 1551 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1291 81K 81K 166960K 1366 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 6 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 57K 97K 166960K 145 0 proc 9 17K 164K 166960K 551 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 6K 6K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 1K 166960K 383 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 103 77K 178K 166960K 3235 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 16 32K 106K 166960K 1306 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 28 2K 2K 166960K 28 0 temp 33 9114K 9154K 166960K 5497 0 kqueue 1 2K 20K 166960K 27 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 34 0 33 1 0 1 1 0 8 0 rtentry 176 110 0 1 5 0 5 5 0 8 0 unpcb 144 49 0 47 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 12 0 11 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 105 0 104 4 0 4 4 0 8 3 nd6 152 23 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfsrclim 320 1 0 1 1 0 1 1 0 8 1 pfstitem 24 27 0 0 1 0 1 1 0 8 0 pfstkey 128 27 0 0 1 0 1 1 0 8 0 pfstate 448 27 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 451 0 0 29 0 29 29 0 8 0 art_table 40 452 0 0 5 0 5 5 0 8 0 art_node 32 110 0 11 1 0 1 1 0 8 0 semapl 72 4 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1591 0 111 93 0 93 93 0 8 0 ffsino 296 1591 0 111 114 0 114 114 0 8 0 nchpl 144 1789 0 81 64 0 64 64 0 8 0 vnodes 216 1682 0 0 94 0 94 94 0 8 0 namei 1024 6373 0 6372 3 0 3 3 0 8 2 percpumem 16 51 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 8373 0 8372 3 1 2 2 1 8 1 plimitpl 152 31 0 21 1 0 1 1 0 8 0 sigapl 424 465 0 432 7 0 7 7 0 8 1 knotepl 120 53 0 0 2 0 2 2 0 8 0 kqueuepl 224 25 0 23 1 0 1 1 0 8 0 pipepl 344 127 0 100 3 0 3 3 0 8 0 fdescpl 528 449 0 432 3 0 3 3 0 8 0 filepl 160 1787 0 1616 17 0 17 17 0 8 6 lockfpl 104 10 0 10 1 0 1 1 0 8 1 lockfspl 48 5 0 5 1 0 1 1 0 8 1 sessionpl 144 24 0 22 1 0 1 1 0 8 0 pgrppl 48 32 0 22 1 0 1 1 0 8 0 ucredpl 104 103 0 100 1 0 1 1 0 8 0 zombiepl 144 432 0 432 1 0 1 1 0 8 1 processpl 1240 465 0 432 5 0 5 5 0 8 1 procpl 664 490 0 448 5 0 5 5 0 8 0 sockpl 752 188 0 184 7 0 7 7 0 8 5 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 108 0 0 14 0 14 14 0 8 0 mcl2k 2048 18 0 0 3 0 3 3 0 8 0 mextrefs 64 7 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 167 0 0 11 0 11 11 0 8 0 bufpl 272 4363 0 105 284 0 284 284 0 8 0 anonpl 32 5411 0 0 44 0 44 44 0 247 0 amapchunkpl 152 9008 0 8731 22 0 22 22 0 158 6 amappl16 200 1849 0 1840 5 0 5 5 0 8 4 amappl15 192 52 0 52 1 0 1 1 0 8 1 amappl14 184 498 0 498 1 0 1 1 0 8 1 amappl13 176 126 0 126 1 0 1 1 0 8 1 amappl12 168 704 0 689 2 0 2 2 0 8 0 amappl11 160 6 0 5 1 0 1 1 0 8 0 amappl10 152 66 0 66 1 0 1 1 0 8 1 amappl9 144 276 0 276 1 0 1 1 0 8 1 amappl8 136 127 0 127 1 0 1 1 0 8 1 amappl7 128 144 0 143 1 0 1 1 0 8 0 amappl6 120 153 0 153 1 0 1 1 0 8 1 amappl5 112 97 0 97 1 0 1 1 0 8 1 amappl4 104 295 0 293 1 0 1 1 0 8 0 amappl3 96 1484 0 1442 3 0 3 3 0 8 0 amappl2 88 568 0 551 2 0 2 2 0 8 0 amappl1 80 10558 0 10472 15 0 15 15 0 8 6 amappl 88 2456 0 2363 4 0 4 4 0 92 0 uvmvnodes 80 99 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 449 0 432 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 449 0 432 1 0 1 1 0 8 0 vmmpekpl 168 5754 0 5721 2 0 2 2 0 8 0 vmmpepl 168 39003 0 38318 87 0 87 87 0 357 40 vmsppl 488 448 0 432 5 0 5 5 0 8 0 rwobjpl 80 14778 0 14452 25 0 25 25 0 8 4 pdppl 4096 905 0 864 101 14 87 87 0 8 46 pvpl 32 9210 0 0 75 0 75 75 0 265 0 pmappl 256 448 0 432 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 556 0 17 16 0 16 16 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff839c3ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a1eb00) at __mp_lock+0x192 intr_handler(ffff80002a2a8490,ffff8000002a3480) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff83a1eb00) at __mp_lock+0x192 ktrsysret(ffff80002a2227d8,28,0,ffff80002a2a8680) at ktrsysret+0xde syscall(ffff80002a2a8730) at syscall+0xa51 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7cb70526eaa0, count: 5 ddb{0}> trace x86_ipi_db(ffffffff839c3ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a1eb00) at __mp_lock+0x192 intr_handler(ffff80002a2a8490,ffff8000002a3480) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff83a1eb00) at __mp_lock+0x192 ktrsysret(ffff80002a2227d8,28,0,ffff80002a2a8680) at ktrsysret+0xde syscall(ffff80002a2a8730) at syscall+0xa51 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7cb70526eaa0, count: -10 ddb{0}> machine ddbcpu 1 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 ktrops(ffff80002a223a00,ffffffffffffffff,0,a0c7df9f,fffff500783aa6d0,fffff500097fd548) at ktrops+0x58 doktrace(fffff500783aa6d0,4,20c7df9f,0,ffff80002a223a00) at doktrace+0x6bd sys_ktrace(ffff80002a223a00,ffff80002a2769e0,ffff80002a276930) at sys_ktrace+0x11c syscall(ffff80002a2769e0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdc00ae3eec0, count: 10 ddb{1}> trace ktrops(ffff80002a223a00,ffffffffffffffff,0,a0c7df9f,fffff500783aa6d0,fffff500097fd548) at ktrops+0x58 doktrace(fffff500783aa6d0,4,20c7df9f,0,ffff80002a223a00) at doktrace+0x6bd sys_ktrace(ffff80002a223a00,ffff80002a2769e0,ffff80002a276930) at sys_ktrace+0x11c syscall(ffff80002a2769e0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdc00ae3eec0, count: -5 ddb{1}>