kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Wed Feb 12 16:48:11 PST 2020 OpenBSD/amd64 (ci-openbsd-multicore-9.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.13' (ECDSA) to the list of known hosts. 2020/02/12 16:48:21 fuzzer started 2020/02/12 16:48:29 dialing manager at 10.128.15.235:8533 2020/02/12 16:48:29 syscalls: 337 2020/02/12 16:48:29 code coverage: enabled 2020/02/12 16:48:29 comparison tracing: enabled 2020/02/12 16:48:29 extra coverage: support is not implemented in syzkaller 2020/02/12 16:48:29 setuid sandbox: enabled 2020/02/12 16:48:29 namespace sandbox: support is not implemented in syzkaller 2020/02/12 16:48:29 Android sandbox: support is not implemented in syzkaller 2020/02/12 16:48:29 fault injection: support is not implemented in syzkaller 2020/02/12 16:48:29 leak checking: support is not implemented in syzkaller 2020/02/12 16:48:29 net packet injection: enabled 2020/02/12 16:48:29 net device setup: support is not implemented in syzkaller 2020/02/12 16:48:29 concurrency sanitizer: support is not implemented in syzkaller 2020/02/12 16:48:29 devlink PCI setup: support is not implemented in syzkaller 16:48:35 executing program 0: r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty\x00', 0x8, 0x0) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000040)=0x3ff) r1 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@un=@abs, &(0x7f00000000c0)=0x8) recvfrom$unix(r1, &(0x7f0000000100)=""/65, 0x41, 0x8c0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x3}, 0x8) r2 = socket$inet(0x2, 0x8007, 0xff) bind(r2, &(0x7f00000001c0)=@in6={0x18, 0x1, 0x6, 0x2}, 0xc) r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/pci\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffff9c, r0) ioctl$WSDISPLAYIO_DELFONT(r4, 0x8058574f, &(0x7f0000000240)={'./file0\x00', 0x3, 0x0, 0x5, 0x1, 0x401, 0x6, 0x5, 0x1, 0x1, 0x7e, 0x800}) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f00000002c0)=0x1) unlink(&(0x7f0000000300)='./file0\x00') pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r5, &(0x7f0000000380)=@abs, &(0x7f00000003c0)=0x8) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x800, 0x0) ioctl$TIOCCONS(r6, 0x80047462, &(0x7f0000000440)=0x9) ioctl$PCIOCWRITE(r3, 0xc0107003, &(0x7f0000000480)={{0x3, 0x5, 0x3b}, 0x6, 0xfffffbff, 0x5648}) socketpair(0x20, 0x4, 0xf8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r7, 0x4, 0x80) pwritev(0xffffffffffffff9c, &(0x7f00000007c0)=[{&(0x7f0000000500)="33ab9150a5e97296d1641004153b75db86882108dbc1f2e9ffa382e3bde40ab43fed32", 0x23}, {&(0x7f0000000540)="fb868329a05f26f8c45f3ad7fce59eb76f3e52b97bc4e4455cd4e0e949a5f638384f5b664fc6cbfdc6025dbe438d1a03b800f26829dc2efb82b527fae08080848a078017016b6a3d6064b6b138496630da01c7bdf771d0b98450285a42eca9250694724c58b569965730c2c896", 0x6d}, {&(0x7f00000005c0)="98358568bbbfe75553ae4e3e6d2bcaadf7207c9277b7602917bace4328649dd391d3", 0x22}, {&(0x7f0000000600)="3f9c1586c8457131a2ee4ee4e3de5146b255fc20bb217c83048038e7532a86d7b59e1e5f44b6014c33801b62219aff03ca12581abfe9e34b1d4d013bd4c307f9889435ec6e0e472787f3abcd6cdc1243bb14836a62f3d2a8b0b7fbd93359d371d14be3169fd00e8897801fde1cc15b72473bcd03461d8c69c905bd23dd52dee2743ad0fb71a02872a2824d49e242365571b287b22d3eb109d26ce53d5a25f4582619caeec875722e796dd0a519dbc79454121a4a5d95", 0xb6}, {&(0x7f00000006c0)="fffc2384d508f4ea39c61755fbcea7b5ef139a440e0d61542bdbe3bf32c5296727741b92a972ae58ba2b6ed9cb9599fe603f3dfdec5c005e00d7857ec847e59e81e913e4eaaed5e14ebb25f54a495906c31cc14c390524627b0af1b7a5cf36ffb1f32ddcb147194b93881a5bf5d0e03e3380ca9d7bf9ee969ece95130b0c7e911a6a45ca43e3e815da4bfe2e850c59dfad41e6000e314e340fd37f0a2da76cae59bc811ccb231a8ba9b03741b321f51ee5c5b31fbdf055494199e6a1cbb732061d1273315d9fa30494", 0xc9}], 0x5, 0x0, 0x4) r8 = open(&(0x7f0000000840)='./file0\x00', 0x80, 0x80) r9 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r10 = socket$unix(0x1, 0x5, 0x0) r11 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/bpf\x00', 0x40, 0x0) r12 = open(&(0x7f0000000ac0)='./file0\x00', 0x0, 0x10a) r13 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/speaker\x00', 0x0, 0x0) r14 = dup2(0xffffffffffffff9c, r2) sendmsg$unix(r9, &(0x7f0000000b80)={&(0x7f0000000880)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000000a40)=[{&(0x7f00000008c0)="f86e618fa57451967b0a3b60b9a4bd5eaa52391dcf894ac8e26137fa82a6ad76671ae2fe25512cf7b4466d5f52edfe89d1469a87afc4", 0x36}, {&(0x7f0000000900)="1fa05fc376f9f9387956802dcb980e23b40219402f6515392e5a828cad78a9c765230cf093fcec19401eae1fdba68293c0379d1e890a3076f41cff5a1a11e7bbdf25b7879f2809fc82e1eab8dd238b711a61cbb64f0536b8d6ebf17de4527938483e128ac15dbb9b483ff1", 0x6b}, {&(0x7f0000000980)="ad71f6b33e146fb7c471ea4a969bc57c5f495afc3e9f5f6e11d66f88ca6b59be37267657cc18dea595a5f468a1dd9da218ebb32180330d30616ab65daebd8e96c875ce52d8b4e00f3ecda9d5d4dda853570ee87cc69d8fd4e7d804ad8c5b9eb88081b8aa9512d4e130074452782e7683d9", 0x71}, {&(0x7f0000000a00)="1a7d7b002fa5e51f3c64ed16b391e71f5bd8d4858feaa1ebdd6fc67a9e9a3694b641942353fb84ce4c", 0x29}], 0x4, &(0x7f0000000b40)=[@rights={0x18, 0xffff, 0x1, [r10]}, @rights={0x28, 0xffff, 0x1, [r11, r5, r12, r8, r13, r14]}], 0x40, 0x1}, 0x0) msgget$private(0x0, 0x10) chdir(&(0x7f0000000bc0)='./file0\x00') open(&(0x7f0000000c00)='./file0\x00', 0x2, 0xa0) 16:48:35 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = getpgid(0xffffffffffffffff) fcntl$setown(r0, 0x6, r1) r2 = dup(0xffffffffffffffff) bind(r2, &(0x7f0000000000)=@in={0x2, 0x1}, 0xc) ioctl$WSDISPLAYIO_LDFONT(r2, 0x8058574d, &(0x7f0000000040)={'./file0\x00', 0xe6, 0x5, 0x780fb53b, 0x1, 0x5, 0x571, 0x20, 0x2, 0x1, 0x1, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc) r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000240)='/dev/wskbd\x00', 0x40, 0x0) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyCcfg\x00', 0x100, 0x0) r8 = socket$inet(0x2, 0x4003, 0x0) r9 = openat$speaker(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/speaker\x00', 0x40, 0x0) r10 = kqueue() r11 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000340)=0xc) r12 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/wsmouse\x00', 0x200, 0x0) r13 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ttyCcfg\x00', 0x8, 0x0) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x800, 0x0) r15 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x80, 0x30) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xc) r17 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0xc) r19 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x8000, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000540)={0x0}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000700)={0x0, 0x0}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) sendmsg$unix(r3, &(0x7f0000000940)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000140), 0x0, &(0x7f00000007c0)=[@cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r4, r5}, @rights={0x38, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffff9c, r6, r7, r0, r8, r9, 0xffffffffffffffff, r0, r2]}, @rights={0x30, 0xffff, 0x1, [r10, r11, r12, r13, r14, r15, r2]}, @cred={0x20, 0xffff, 0x0, r1, 0x0, r16}, @cred={0x20, 0xffff, 0x0, r1, r17, r18}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r19]}, @cred={0x20, 0xffff, 0x0, r20, r21, 0xffffffffffffffff}, @cred={0x20, 0xffff, 0x0, r1, r22, r23}, @cred={0x20, 0xffff, 0x0, r1, r24, r25}], 0x148, 0xc}, 0x402) 16:48:37 executing program 0: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty\x00', 0x800, 0x0) ftruncate(r1, 0x0, 0x30000000000) truncate(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffff) ftruncate(r0, 0x0, 0x100000004) open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCNXCL(r2, 0x2000740e) login: pckbd_enable: command error 16:48:37 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f00000001c0)) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='c\x00') r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockname(r1, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8) ioctl$TIOCGFLAGS(0xffffffffffffff9c, 0x4004745d, &(0x7f0000000140)) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200, 0x0) 16:48:37 executing program 1: link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup2(r0, 0xffffffffffffffff) setrlimit(0x0, &(0x7f0000000140)={0xfffffffffffffffb, 0x9e}) connect(r2, &(0x7f0000000000)=@in6={0x18, 0x1, 0x4, 0x8}, 0xc) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x2, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x2], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x80], [0x0, 0xfff, 0x482], [{}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2}]}}) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x59, 0x0) kqueue() r3 = socket(0x18, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCFLUSH(r4, 0x8080691a, &(0x7f0000000300)) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000180), 0xc) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$sock_linger(0xffffffffffffff9c, 0xffff, 0x80, &(0x7f0000000040)={0x81, 0x80000000}, 0x8) r5 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r5, 0x0, r5) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)=0xfffffffe) 16:48:37 executing program 1: open$dir(&(0x7f0000001240)='./file0\x00', 0x400000002c4, 0x0) acct(&(0x7f0000000200)='./file0\x00') acct(0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x4) connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8) 16:48:37 executing program 0: mknod(&(0x7f0000000040)='./file0\x00', 0x1ffb, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x200, 0x0) acct(&(0x7f0000000080)='./file0\x00') setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) acct(&(0x7f00000000c0)='./file0\x00') r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) r3 = socket(0x18, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCFLUSH(r4, 0x8080691a, &(0x7f0000000300)) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000100)=0x400) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000140)='./file0\x00') execve(0x0, 0x0, 0x0) 16:48:37 executing program 1: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) r1 = socket(0x10000000002, 0x2, 0x0) r2 = socket(0x18, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) getpeername$unix(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="00b5f5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005695657a2d416007c2bf76c4731c8aa3cc61912de7dfa9dc161d72bb696d948cca2456a92b4f50692297df80ecf47fb00bf5c4fe7fb165bdfc27e6255a41953b177a96a9e98e5e84f8cd41bcbb156a8a319cdf9e4d0cf90527d4c0bb63954f9390eca2d34a0c55281"], &(0x7f0000000080)=0x6e) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f00000000c0)=0x3, 0x4) r4 = openat$klog(0xffffffffffffff9c, &(0x7f0000000100)='/dev/klog\x00', 0x100, 0x0) close(r4) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) chmod(&(0x7f0000000180)='./file0\x00', 0x342) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') dup2(r0, r1) 16:48:37 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40000400000002c1, 0x0) r1 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x40000008, r1) ftruncate(r0, 0x0, 0x7fffffffff6) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) 16:48:37 executing program 1: r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0x8, 0x4) r2 = socket(0x18, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) shutdown(r3, 0x1) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r2, 0x2}) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe, 0x0, "090000f38900f4ffe64dc22a30adca60b38800"}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) r4 = socket(0x18, 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffff, 0x0, "00370700000000000000df00000000000000e600"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$inet(r2, &(0x7f0000000340)="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", 0x1000, 0x8, &(0x7f0000000040)={0x2, 0x3}, 0xc) close(r4) r5 = socket(0x18, 0x3, 0x0) dup2(r0, r4) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13f9fd812eaa4e713040e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:37 executing program 0: r0 = kqueue() r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r1, 0xc5005601, &(0x7f0000000580)={0x9, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20000000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4]}}) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyCcfg\x00', 0x10000, 0x0) ioctl$WSDISPLAYIO_DELSCREEN(r2, 0x80085754, &(0x7f0000000080)={0x0, 0x2}) kevent(r0, &(0x7f0000000040), 0x3ffc0, 0x0, 0x300e, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x6) pwrite(r1, &(0x7f00000000c0)="8f60ab0c1a1e5996c23a615bfcc90a2f46cf3e26eb82a7625548c3ae1cc3492c57b1dcfd5519f44770bbf62d331b838033d3b3ba68df931f2db03894fb98a964224bf1c4e332800fbc3c1fe372ca85b954d418a40094d3f877a39ce6f53360b5a4a1f0ee156b4a183783827db041625c33375fcb8b5f04e87d553efbd9cacf421c2c57495f0a29e39761cbf69a782de2", 0x90, 0x0, 0xdbc0) r3 = socket(0x18, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCFLUSH(r4, 0x8080691a, &(0x7f0000000300)) ioctl$TIOCCDTR(r4, 0x20007478) pipe(&(0x7f0000000000)) 16:48:37 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) bind(r1, &(0x7f00000001c0)=@in={0x2, 0x2}, 0xc) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse0\x00', 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000180)={&(0x7f0000000140)=[{0x26}, {}], 0x2}) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse0\x00', 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000180)={&(0x7f0000000140)=[{0x26}, {}], 0x2}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x0, 0x0) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse0\x00', 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r5, 0x80105728, &(0x7f0000000180)={&(0x7f0000000140)=[{0x26}, {}], 0x2}) readv(r5, &(0x7f0000002500)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000001340)=""/213, 0xd5}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000024c0)=""/9, 0x9}], 0x5) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse0\x00', 0x1, 0x0) r7 = msgget(0x1, 0x3fb6793e968c1eec) msgsnd(r7, &(0x7f0000002440)={0x3, "6f1ed1c5b08409cb25cbdf52a7cc32c5644932a5c567b93e177914a11175d72475272400b5ba5a4c78fb11fb3097b7b8b573e73683b41d742eb881947362948918d1c80ce58886606099f9b65fdca4eb80"}, 0x59, 0xc00) ioctl$WSMOUSEIO_SETPARAMS(r6, 0x80105728, &(0x7f0000000180)={&(0x7f0000000140)=[{0x26}, {}], 0x2}) poll(&(0x7f0000000040)=[{r2, 0x94ffdcfa58a2bd27}, {r3, 0x186}, {r0, 0x2}, {r4, 0x8}, {r6, 0x20}, {r0, 0x80}, {r0, 0x1}], 0x7, 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) close(0xffffffffffffffff) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xb1}, {0x800000014}, {0x6}]}) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) syz_emit_ethernet(0x4d, &(0x7f00000000c0)="b6") r8 = socket(0x2, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$TIOCFLUSH(r9, 0x80286987, &(0x7f0000000300)) ioctl$WSDISPLAYIO_GVIDEO(r9, 0x40045744, &(0x7f0000000080)) 16:48:37 executing program 0: ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "f01d00200b0f000005000000ac39080500cad800"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x18, 0xc002, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cb9, 0x4) r2 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:37 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCPROMISC(r0, 0x20004269) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x2, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) r4 = socket(0x18, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$BIOCFLUSH(r0, 0x20004268) ioctl$TIOCFLUSH(r5, 0x8080691a, &(0x7f0000000300)) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x400, 0x5, 0x8, 0xc3}, {0x8, 0x20, 0x80, 0x10001}, {0x5, 0x62, 0x8, 0x6}, {0xa, 0x80, 0x80, 0x1f}, {0x0, 0x1f, 0x9, 0x3}]}) ioctl$KDSETRAD(r5, 0x20004b43) ioctl$WSDISPLAYIO_LDFONT(r5, 0x8058574d, &(0x7f0000000200)={'./file0\x00', 0x10000, 0x4, 0xce4, 0x0, 0xff, 0xfffff4ca, 0x4, 0x0, 0x2, 0x4}) r6 = dup(0xffffffffffffffff) ioctl$BIOCSDLT(r6, 0x8004427a, &(0x7f00000000c0)=0x9) ioctl$BIOCPROMISC(r1, 0x20004269) close(r0) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f0000000140)={0xffffffffffffffff, 0x200}) 16:48:37 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bpf\x00', 0x242, 0x0) acct(&(0x7f0000000040)='./file0\x00') ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x45}, {0x48}, {0x6, 0x0, 0x0, 0x100}]}) nanosleep(&(0x7f0000000100)={0xcc, 0x91d3}, &(0x7f0000000140)) pwrite(r0, &(0x7f0000000240)="d000"/14, 0xe, 0x0, 0x0) 16:48:37 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x4, &(0x7f0000000200)=[{0x84}, {0x3c, 0x0, 0xfd}, {0x7ffffffe}, {0x4, 0x2, 0x5, 0x2af}]}) r1 = socket(0x18, 0x2, 0x0) r2 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r2) kqueue() r3 = socket(0x18, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCFLUSH(r4, 0x8080691a, &(0x7f0000000300)) r5 = socket(0x18, 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TIOCFLUSH(r6, 0x8080691a, &(0x7f0000000300)) r7 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = socket(0x18, 0x2, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$TIOCFLUSH(r9, 0x8080691a, &(0x7f0000000300)) r10 = fcntl$dupfd(r4, 0x0, r1) ioctl$TIOCFLUSH(r10, 0x8080691a, &(0x7f0000000300)) r11 = socket(0x18, 0x2, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$TIOCFLUSH(r12, 0x8080691a, &(0x7f0000000300)) ioctl$TIOCNXCL(r12, 0x2000740e) ioctl$WSDISPLAYIO_SMODE(r10, 0x8004574c, &(0x7f0000000180)=0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0xffff, 0x2, 0x3f, 0x5}]}) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000a80)="b6bc1fc92479ff2b783f6e8a9c81") 16:48:37 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x4000000001, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{0x14}, {0x54}, {0x6, 0x0, 0x0, 0xfc}]}) pwrite(r0, &(0x7f00000001c0)="fbaf8a8d1a021b040c3be3e3f6be", 0xe, 0x0, 0x0) 16:48:37 executing program 1: socketpair(0x20, 0x8000, 0x40, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r1 = socket(0x1e, 0x4003, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504600003000000080005010000", 0x300, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) bind(r1, &(0x7f00000002c0)=@in6={0x18, 0x1, 0x6}, 0xc) r2 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) setsockopt$sock_timeval(0xffffffffffffff9c, 0xffff, 0x1006, &(0x7f0000000240)={0x3, 0x2}, 0x10) fcntl$setstatus(r2, 0x4, 0x80) pwritev(r2, &(0x7f00000003c0), 0x273, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = kqueue() r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000400)='/dev/wskbd\x00', 0x20000, 0x0) r6 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = dup2(r6, 0xffffffffffffff9c) r8 = socket(0x18, 0x2, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$TIOCFLUSH(r9, 0x8080691a, &(0x7f0000000300)) r10 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r10, 0x0, r10) r11 = socket(0x18, 0x2, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$TIOCFLUSH(r12, 0x8080691a, &(0x7f0000000300)) r13 = openat$klog(0xffffffffffffff9c, &(0x7f0000000440)='/dev/klog\x00', 0x200, 0x0) sendmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f00000003c0)=[{&(0x7f0000000380)="87a1be68de6b54544983c5074c76e31face301307dd1f682efd610166bad2215d7e16cb18083ac4c97b9e1", 0x2b}], 0x1, &(0x7f0000000480)=[@rights={0x28, 0xffff, 0x1, [r5, r7, r9, r10, 0xffffffffffffffff, r12]}, @rights={0x18, 0xffff, 0x1, [r13, r0]}, @rights={0x20, 0xffff, 0x1, [r2, r0, r1, r4]}], 0x60, 0xb}, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x10, r3, 0x0, 0x0) connect$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x0, 0x2}, 0x8) r14 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r14, 0x0, r14) sendto$inet(r14, &(0x7f0000000100)="c9aef4e63d0e6f90853e1ccb3e983b6f090022f8ffffffffffffff04034d02e8ced9c2bbd1cc54b3ea4fef0657eb919c41dd1e3d300f766b96164a0b5c41e1443d04ba0400000000000000f5e848f7d2f2f18467913f5b016e2655ad203a396088", 0x61, 0x4, &(0x7f0000001340)={0x2, 0x3}, 0xc) semget$private(0x0, 0x2, 0x200) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0x0, 0x20) r15 = socket(0x1, 0x1, 0x0) r16 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wskbd0\x00', 0x0, 0x0) r17 = fcntl$dupfd(r16, 0x0, r15) r18 = socket(0x18, 0x2, 0x0) r19 = fcntl$dupfd(r18, 0x0, r18) ioctl$TIOCFLUSH(r19, 0x8080691a, &(0x7f0000000300)) ioctl$BIOCSDIRFILT(r19, 0x8004427d, &(0x7f00000000c0)=0x7ff) ioctl$PCIOCREAD(r17, 0x80045710, &(0x7f0000000080)) pckbd_enable: command error 16:48:39 executing program 0: readv(0xffffffffffffff9c, &(0x7f00000016c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) r2 = socket(0x18, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) r4 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = socket(0x18, 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TIOCFLUSH(r6, 0x8080691a, &(0x7f0000000300)) r7 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000200)=0xc) r9 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r9, 0x0, r9) r10 = socket$inet6(0x18, 0x8000, 0x8) r11 = kqueue() r12 = socket$inet(0x2, 0x5, 0xfb) poll(&(0x7f0000000240)=[{r1, 0x100}, {r3, 0x4}, {r4, 0x20}, {r6, 0x100}, {r7, 0x4}, {r8, 0x80}, {r9}, {r10, 0x4}, {r11, 0x4}, {r12, 0x4}], 0xa, 0x2) accept$inet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000140)=0x7) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x86128) r13 = open(&(0x7f0000000040)='./bus\x00', 0x1, 0x0) pwritev(r13, &(0x7f00000000c0)=[{&(0x7f0000000080)="fa1204a49155ce1e00", 0x9}], 0x1, 0x0, 0x0) pwritev(r13, &(0x7f00000001c0)=[{&(0x7f0000000140), 0x8}], 0x28d, 0x0, 0x0) 16:48:39 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f00000002c0)) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000000)={0xfffffffffffffffb, 0x5}) poll(&(0x7f00000000c0)=[{r0, 0x18b}], 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) syz_emit_ethernet(0x392, &(0x7f0000000100)="7447d32cc927b1ec094440c2dc27") r1 = socket(0x18, 0x2, 0x0) r2 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = fcntl$dupfd(r1, 0xa, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) r4 = socket(0x18, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCFLUSH(r5, 0x8080691a, &(0x7f0000000300)) r6 = socket(0x18, 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TIOCFLUSH(r7, 0x8080691a, &(0x7f0000000300)) r8 = socket$inet(0x2, 0x2, 0x9) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$TIOCSPGRP(r9, 0x40047477, &(0x7f0000000340)) poll(&(0x7f0000000200)=[{r3, 0x4}, {r5, 0x2}, {r7, 0x4}, {r8, 0x2}, {r0, 0x4}], 0x5, 0xfe1) bind(0xffffffffffffffff, &(0x7f0000000280)=@in6={0x18, 0x2, 0x0, 0xa6}, 0xc) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) read(r0, &(0x7f0000000040)=""/32, 0x20) panic: receive 1a: so 0xfffffd806f6df190, so_type 3, m 0xfffffd8069adc600, m_type 0 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 229228 54167 0 0x2 0x480 1 syz-executor.0 *237712 76074 0 0 0 0 dhclient db_enter() at db_enter+0x18 panic(ffffffff821c23e8) at panic+0x15c soreceive(fffffd806f6df190,0,ffff800020abd8c8,0,0,ffff800020abd7d4) at soreceive+0x174a soo_read(fffffd807c5fc000,ffff800020abd8c8,0) at soo_read+0x53 dofilereadv(ffff800020a7c008,6,ffff800020abd8c8,0,ffff800020abd9b0) at dofilereadv+0x1a1 sys_read(ffff800020a7c008,ffff800020abd960,ffff800020abd9b0) at sys_read+0x83 syscall(ffff800020abda30) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7fffff97f0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic receive 1a: so 0xfffffd806f6df190, so_type 3, m 0xfffffd8069adc600, m_type 0 ddb{0}> trace db_enter() at db_enter+0x18 panic(ffffffff821c23e8) at panic+0x15c soreceive(fffffd806f6df190,0,ffff800020abd8c8,0,0,ffff800020abd7d4) at soreceive+0x174a soo_read(fffffd807c5fc000,ffff800020abd8c8,0) at soo_read+0x53 dofilereadv(ffff800020a7c008,6,ffff800020abd8c8,0,ffff800020abd9b0) at dofilereadv+0x1a1 sys_read(ffff800020a7c008,ffff800020abd960,ffff800020abd9b0) at sys_read+0x83 syscall(ffff800020abda30) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7fffff97f0, count: -8 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff800020abd610 rbx 0xffff800020abd6c0 rdx 0xffff800020a7c008 rcx 0 rax 0 r8 0xffffffff81729e0f kprintf+0x16f r9 0x1 r10 0x25 r11 0x56823f8b4498519d r12 0x3000000008 r13 0xffff800020abd620 r14 0x100 r15 0x1 rip 0xffffffff8149d698 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800020abd600 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (dhclient) pid=237712 stat=onproc flags process=0 proc=0 pri=24, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff800020a7d118,0xffff800020a7c288 process=0xffff800020a903d0 user=0xffff800020ab8000, vmspace=0xfffffd807f000450 estcpu=0, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 9443 115005 38951 0 2 0 syz-executor.1 9443 462330 38951 0 2 0x4000000 syz-executor.1 52468 496326 54167 0 2 0 syz-executor.0 52468 304938 54167 0 3 0x4000080 fsleep syz-executor.0 29424 315715 0 0 3 0x14200 acct acct 56852 277507 0 0 3 0x14200 bored sosplice 38951 340091 93724 0 3 0x82 nanosleep syz-executor.1 54167 229228 93724 0 7 0x482 syz-executor.0 93724 399305 76972 0 3 0x82 thrsleep syz-fuzzer 93724 323979 76972 0 2 0x4000002 syz-fuzzer 93724 140328 76972 0 3 0x4000082 thrsleep syz-fuzzer 93724 356339 76972 0 3 0x4000082 thrsleep syz-fuzzer 93724 491370 76972 0 3 0x4000082 thrsleep syz-fuzzer 93724 421653 76972 0 3 0x4000082 kqread syz-fuzzer 93724 381717 76972 0 3 0x4000082 thrsleep syz-fuzzer 93724 200490 76972 0 3 0x4000082 thrsleep syz-fuzzer 93724 68707 76972 0 3 0x4000082 thrsleep syz-fuzzer 93724 439627 76972 0 3 0x4000082 thrsleep syz-fuzzer 76972 402363 60736 0 3 0x10008a pause ksh 60736 46461 46833 0 3 0x92 select sshd 89076 318031 1 0 3 0x100083 ttyin getty 46833 193212 1 0 3 0x80 select sshd 41343 278300 56867 74 3 0x100092 bpf pflogd 56867 221771 1 0 3 0x80 netio pflogd 36828 476035 33341 73 3 0x100090 kqread syslogd 33341 275172 1 0 3 0x100082 netio syslogd 57655 340535 1 77 3 0x100090 poll dhclient *76074 237712 1 0 7 0 dhclient 5668 97613 0 0 2 0x14200 zerothread 15033 197889 0 0 3 0x14200 aiodoned aiodoned 90668 25740 0 0 3 0x14200 syncer update 78136 432365 0 0 3 0x14200 cleaner cleaner 34252 233217 0 0 3 0x14200 reaper reaper 59797 230190 0 0 3 0x14200 pgdaemon pagedaemon 10537 132007 0 0 3 0x14200 bored crynlk 92005 209036 0 0 3 0x14200 bored crypto 42123 309905 0 0 3 0x40014200 acpi0 acpi0 74933 484907 0 0 3 0x40014200 idle1 64390 423227 0 0 3 0x14200 bored softnet 43514 307049 0 0 3 0x14200 bored systqmp 613 83072 0 0 3 0x14200 bored systq 4821 332629 0 0 3 0x40014200 bored softclock 27892 161235 0 0 3 0x40014200 idle0 31514 510503 0 0 3 0x14200 bored smr 1 4380 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 76074 (dhclient) thread 0xffff800020a7c008 (237712) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff826203f0) #0 witness_lock+0x52e #1 solock+0x66 #2 soreceive+0x114 #3 soo_read+0x53 #4 dofilereadv+0x1a1 #5 sys_read+0x83 #6 syscall+0x4a4 #7 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9478 6401K 6917K 78643K 10637 0 pcb 13 8K 8K 78643K 17 0 rtable 105 3K 3K 78643K 201 0 ifaddr 49 11K 11K 78643K 53 0 counters 43 33K 33K 78643K 43 0 ioctlops 0 0K 4K 78643K 1471 0 iov 0 0K 12K 78643K 2 0 mount 1 1K 1K 78643K 1 0 vnodes 1220 77K 77K 78643K 1240 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 4 0K 0K 78643K 4 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 196K 290K 78643K 12766 0 file desc 6 17K 25K 78643K 54 0 proc 59 63K 95K 78643K 443 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 33 2K 2K 78643K 33 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 19 95K 95K 78643K 19 0 exec 0 0K 1K 78643K 209 0 pfkey data 0 0K 1K 78643K 2 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 117 22K 23K 78643K 1110 0 UVM aobj 2 2K 2K 78643K 2 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 7 0K 0K 78643K 11 0 temp 74 3008K 3072K 78643K 2147 0 kqueue 3 4K 4K 78643K 3 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 19 0 17 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 45 0 35 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 30 0 30 1 0 1 1 0 8 1 tcpcb 544 16 0 12 1 0 1 1 0 8 0 inpcb 280 105 0 92 2 0 2 2 0 8 1 nd6 48 4 0 0 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 0 1 1 0 8 1 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 11 0 0 1 0 1 1 0 8 0 pfstkey 112 11 0 0 1 0 1 1 0 8 0 pfstate 328 11 0 0 1 0 1 1 0 8 0 pfrule 1360 21 0 15 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 213 0 0 14 0 14 14 0 8 0 art_table 32 214 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 0 1 0 1 1 0 8 0 semapl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1457 0 47 46 0 46 46 0 8 0 ffsino 272 1457 0 47 95 0 95 95 0 8 0 nchpl 144 1717 0 98 61 0 61 61 0 8 0 uvmvnodes 72 1519 0 0 28 0 28 28 0 8 0 vnodes 208 1519 0 0 80 0 80 80 0 8 0 namei 1024 4444 0 4444 1 0 1 1 0 8 1 percpumem 16 32 0 0 1 0 1 1 0 8 0 scxspl 192 5156 0 5154 8 1 7 7 0 8 5 plimitpl 152 15 0 7 1 0 1 1 0 8 0 sigapl 432 253 0 237 3 0 3 3 0 8 1 futexpl 56 443 0 442 1 0 1 1 0 8 0 knotepl 112 53 0 34 1 0 1 1 0 8 0 kqueuepl 104 13 0 10 1 0 1 1 0 8 0 pipelkpl 48 78 0 68 1 0 1 1 0 8 0 pipepl 120 156 0 137 1 0 1 1 0 8 0 fdescpl 496 254 0 237 3 0 3 3 0 8 0 filepl 152 1370 0 1262 5 0 5 5 0 8 0 lockfpl 104 12 0 11 1 0 1 1 0 8 0 lockfspl 48 5 0 4 1 0 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 18 0 7 1 0 1 1 0 8 0 ucredpl 96 47 0 38 1 0 1 1 0 8 0 zombiepl 144 239 0 239 1 0 1 1 0 8 1 processpl 960 273 0 239 5 0 5 5 0 8 0 procpl 624 338 0 293 4 0 4 4 0 8 0 sosppl 128 3 0 3 1 0 1 1 0 8 1 sockpl 400 171 0 146 4 0 4 4 0 8 1 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 4 0 0 1 0 1 1 0 8 0 mcl2k 2048 145 0 0 18 0 18 18 0 8 0 mtagpl 80 2 0 0 1 0 1 1 0 8 0 mbufpl 256 157 0 0 10 0 10 10 0 8 0 bufpl 280 4159 0 191 284 0 284 284 0 8 0 anonpl 16 40016 0 24059 66 1 65 65 0 125 0 amapchunkpl 152 1214 0 1069 8 0 8 8 0 158 0 amappl16 192 1017 0 160 43 0 43 43 0 8 0 amappl15 184 83 0 76 1 0 1 1 0 8 0 amappl14 176 35 0 32 1 0 1 1 0 8 0 amappl12 160 17 0 10 1 0 1 1 0 8 0 amappl11 152 52 0 37 1 0 1 1 0 8 0 amappl10 144 11 0 8 1 0 1 1 0 8 0 amappl9 136 601 0 598 1 0 1 1 0 8 0 amappl8 128 125 0 100 2 0 2 2 0 8 0 amappl7 120 102 0 91 1 0 1 1 0 8 0 amappl6 112 61 0 52 1 0 1 1 0 8 0 amappl5 104 134 0 120 1 0 1 1 0 8 0 amappl4 96 500 0 472 1 0 1 1 0 8 0 amappl3 88 116 0 107 1 0 1 1 0 8 0 amappl2 80 1098 0 1014 3 1 2 3 0 8 0 amappl1 72 15640 0 15178 26 12 14 21 0 8 4 amappl 80 584 0 538 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 1 0 0 1 0 1 1 0 8 0 uaddrrnd 24 254 0 237 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 254 0 237 1 0 1 1 0 8 0 vmmpekpl 168 6005 0 5971 2 0 2 2 0 8 0 vmmpepl 168 38615 0 36490 124 4 120 120 0 357 27 vmsppl 368 253 0 237 2 0 2 2 0 8 0 pdppl 4096 515 0 474 6 0 6 6 0 8 0 pvpl 32 138044 0 118880 158 0 158 158 0 265 2 pmappl 232 253 0 237 2 0 2 2 0 8 1 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 165 0 2 5 0 5 5 0 8 0