last executing test programs: 21.698728443s ago: executing program 7 (id=1926): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0x1, 0xffef9ff6, 0x2, "4b06a6bcff0300dba800000000000800", 0x0, 0xd}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="944713145761ef4626e1cc7f391f55166f838c5f5b0fe563162b7bfc", 0x1c}, {&(0x7f00000000c0)="d6accee1c3c4447919b68f12aed218a2919eb5ccedebf4bb4d9abb9514b0c2038aa1181aa3ad6b41c733bb946599ccb94b", 0x31}], 0x2) write(r0, &(0x7f0000000140)="a636fba650ad5ac4fee6da1a218df60b1bad4d1da3e9270a35f5d7df265ae28fbf42e0afb96547efd7006838f7bd495bc70ca31d53c27afe10bc96e5d9859d39482d798ac9f6bef37501d43f9aac1f88c2b225f540826c20acce3bb3a5fe0ea37990ee4a214dab0052ab0f9077216d6c6e95c46b58c5ca799c55bf35ec", 0x7d) syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)=0x2) 8.500600223s ago: executing program 3 (id=1975): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004745f, &(0x7f0000000000)=0x1d) 8.500410168s ago: executing program 4 (id=1976): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r1 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r1) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0xfffffffffffffffe, 0x8}, {0x2, 0x1}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r0, 0x0) lseek(r0, 0x8, 0x1) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 8.480674066s ago: executing program 7 (id=1977): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000140)='./bus\x00', 0x2, 0x1e5) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xffffffffffffffff, 0xca, 0x0, 0x5, 0x3}], 0x203, 0x0, 0x8c97, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCGHDRCMPLT(r1, 0x40044274, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0xc0285108, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xfffffffffffffd10}) 7.743270936s ago: executing program 1 (id=1979): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) r1 = socket(0x800000018, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 7.499708016s ago: executing program 6 (id=1981): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) 7.493058526s ago: executing program 1 (id=1982): setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000100)={0x80978c, 0x80000000, 0xdf0, 0x80a19a, "bf08000100f1000079c58d8e00", 0x8, 0x100}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) 6.947816719s ago: executing program 3 (id=1984): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x803, 0x3fb, 0xffff, 0x200499, "084880fa870000bdda0988d11554e90d6602ff07", 0xb6, 0x3}) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="6ef675cab934bfd9ebf0d6cb9285c77f4d085dc8a1c444e408d225f2a0231de1042134e609ffe2bfa66f625e1530d6139c95f5e97f0e91291f688f0ded02fd45414d9bd9153d16f3c8f613fefa852d542711bd65440c322b47e03bc1f9632aed9c6ad9585683dab7164d56b677b8856d374be7fc6bb18f7789ea5c403a3cf70f542c6a2c835bf7e8400bd96bff870f", 0x8f}], 0x1) 6.947140943s ago: executing program 2 (id=1985): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffe, 0xbf}], 0x0, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000080), 0xfd, 0x0, 0x8002, 0x0) kevent(r1, 0x0, 0x0, &(0x7f0000000400), 0x4, 0x0) 6.488214586s ago: executing program 4 (id=1986): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8, 0x8, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x7fff, 0x80000201}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x2}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x800, 0xffbf, 0x80cf}, {0x1, 0x5, 0x85, 0x2}, {0x0, 0x1, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x17fff}, {0x7, 0x0, 0x5, 0x7}, {0x8, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10b, 0x10001, 0x9}, {0x7, 0xee2, 0x4, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x7fff}, {0xffffffff, 0x8003, 0x6, 0x69}]}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000180)={0x80000001, 0x4, 0x8000, 0x9, 0x9, 0x4520af25, 0xc6, 0x10, [{0x9, 0x7f, 0x80000000, 0x2}, {0x4800, 0x9, 0x3, 0x9}, {0x8, 0x1, 0x3, 0x97}, {0x0, 0x3, 0x9, 0x2}, {0x10000, 0x1, 0x3ff, 0x5}, {0x2, 0x1, 0x4, 0x2}, {0x34d6, 0x7, 0x6, 0x3}, {0x8000, 0x388, 0x1, 0x9}, {0xfffffff7, 0x1f1a, 0x1, 0x1932a36a}, {0x2, 0x27, 0xfff, 0x1}, {0x6, 0xc1a, 0x1, 0x9}, {0x0, 0x2, 0x9, 0x3}, {0x8, 0x1000, 0x4, 0x9}, {0x2, 0xfffffff7, 0x8, 0x5}, {0x1, 0xc890, 0x8, 0x7}, {0x5, 0x7fff, 0x2, 0x3ff}]}) poll(&(0x7f0000000000), 0x35, 0x0) sendmmsg(r0, &(0x7f0000001440)={0x0, 0x1}, 0xfffffffffffffe64, 0x0) 5.990521441s ago: executing program 0 (id=1987): r0 = kqueue() fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff6, 0x1000100010008, 0xffffffffffffffff}) r1 = kqueue() kevent(r1, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) kevent(r0, &(0x7f0000000000), 0x403, 0x0, 0x8000800, 0x0) 5.985367309s ago: executing program 6 (id=1988): r0 = socket$inet(0x2, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) 5.498564582s ago: executing program 3 (id=1989): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0xf66d, 0x5, 0xf, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x3ff, 0x207f}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="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", 0x290}], 0x1) 5.497320952s ago: executing program 6 (id=1990): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x7) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) ioctl$TIOCEXCL(r0, 0x2000740d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setreuid(0x0, 0xee01) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x30) 4.74974368s ago: executing program 2 (id=1992): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0xf9, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x4}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0xc, 0x650, 0x3, 0x99}, {0xce0, 0x3, 0x4f8, 0x6d}, {0x3, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x20006a75, 0x8001, 0x1, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x4000008, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x2001, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xf, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) socketpair(0x2, 0x3, 0x81, 0x0) 4.49111001s ago: executing program 4 (id=1993): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x95, 0x1, 0x1, 0x1}, {0xc, 0x80, 0x70, 0x4004}, {0x400e, 0xa0, 0x53, 0x7}]}) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="00041b000f3ebbed518095043fa8985d012cc6d4", &(0x7f0000000000)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) 4.489219381s ago: executing program 7 (id=1994): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() write(r0, &(0x7f00000003c0)="b0", 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0x0, 0x0, 0x8, 0xfffffe51, "5fff097e0000000000017e35e1d055a8e5a800"}) poll(&(0x7f0000000240)=[{r1, 0x68}], 0x1, 0x0) 3.975573859s ago: executing program 1 (id=1995): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x2000006}, {0x40, 0x10, 0x5, 0x1}, {0x9e, 0x18, 0x0, 0x40003}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="00041b000f3e8095043fa8985d012c000001003d0817c53fcb7c7d40b5876610803975002a95caa20000000000000000f608f79ce1e356ab047103000000d7526df8c1561d", &(0x7f0000000000)=0x45, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) 3.974744982s ago: executing program 0 (id=1996): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x25, 0xfe, 0x6}, {0x9e, 0x9, 0x0, 0x40003}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000100)="d076940d1854b9c32228c77c21b43442ba56ff45a5b47bba17a633c965ef066533603a148d093f1817c54ec100007c088c321882e1", &(0x7f0000000000)=0x35, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="a1541198c9db", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '`b`', 0x0, 0x1d, 0x1, @empty, @mcast2}}}}) 3.972456804s ago: executing program 5 (id=1997): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000017c000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7e}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3}, {&(0x7f00003ff000/0xc00000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f000098f000/0x2000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f0000257000/0x1000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffff7ffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000}, {&(0x7f0000ad5000/0x3000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0xfffffffe}) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) open(0x0, 0x615, 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc1206949, &(0x7f00000001c0)) 3.249465454s ago: executing program 3 (id=1998): r0 = socket$inet(0x2, 0x3, 0x0) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) 3.19940895s ago: executing program 6 (id=1999): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7, 0x0}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x80000000, {0x0, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) 3.195052968s ago: executing program 2 (id=2000): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)="01", 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) 2.977295349s ago: executing program 7 (id=2001): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x7, 0x80}, {0x1, 0x2, 0x3}, {0x6, 0x80, 0x8}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000140)="000400000f3e187f8637b4149e293d0817c53fcb7c7d40b5ac66639ad7e5123c4ec15d10802975d49e33e802fa", &(0x7f0000000000)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 2.974687632s ago: executing program 0 (id=2002): pipe(&(0x7f0000000140)) clock_settime(0x100000000000000, &(0x7f0000000000)={0xee1ecc7f, 0x2}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) connect(r0, &(0x7f0000000080)=@in={0x2, 0x1}, 0xc) 2.97161099s ago: executing program 1 (id=2003): r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000100)=0xb, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x85, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x1, 0xb000000000004000, 0xfffffffffffffffc, 0x807}) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r1 = socket(0x800000018, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 2.749485237s ago: executing program 4 (id=2004): r0 = socket(0x18, 0x3, 0x0) setreuid(0xee00, 0x0) r1 = getuid() setuid(r1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f0000000100)) 2.737667782s ago: executing program 5 (id=2005): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x27, 0xfd, 0x8}, {0x7, 0x10, 0x5, 0x3}, {0x9e, 0x81, 0x0, 0x40003}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="ad09ecd4bc9c769c0ea420ebadb4e9dc844e74e449940d1854d63d3a14", &(0x7f0000000000)=0x1d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 2.694788165s ago: executing program 6 (id=2006): open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1ff}) r0 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) setuid(0xffffffffffffffff) select(0x40, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000001140)={0x0, 0x5, 0x6, 0x8}, &(0x7f0000000080)={0x3, 0x0, 0xb, 0x0, 0x18ae, 0x9, 0x0, 0x2}, &(0x7f0000000100)) 2.498171338s ago: executing program 3 (id=2007): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x184}, 0xfeffffffffffffff, 0x4, 0x28c}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x1, &(0x7f00000000c0)="0c581201", 0x4) socket$inet(0x2, 0x3, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) 2.494565386s ago: executing program 7 (id=2008): open(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000140)='./bus\x00', 0x2, 0x1e5) kevent(0xffffffffffffffff, 0x0, 0x203, 0x0, 0x8c97, 0x0) open$dir(0x0, 0x400, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0xc0285108, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xfffffffffffffd10}) 2.209798995s ago: executing program 0 (id=2009): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0x6, 0x2, 0x7}, {0x1c, 0xff, 0x88, 0x8000007}, {0x6, 0x80, 0x9, 0xf2e3}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000100)="00f01a00c4cc534dae0653f5d23529239e838e000000000c411acc9c3050108039a50e8a264915563ed00ff057cbf3f9c6bca7d95da73e52a0e9be6a3c379300c95d2a5a6b4db4e2ff000000007c324a25df4171", &(0x7f0000000000)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[]) 2.203014919s ago: executing program 4 (id=2010): kqueue() open(0x0, 0x10000, 0x10) r0 = semget(0x0, 0x1, 0x281) select(0x40, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x5, 0x0, 0xffc, 0x3, 0x425}, 0x0, 0x0, 0x0) semop(r0, &(0x7f0000000000), 0x23) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) 2.196227207s ago: executing program 2 (id=2011): open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) setrlimit(0x1, &(0x7f0000000980)={0x8, 0x8}) r0 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x1900, r0) setreuid(0xee00, 0x0) pipe2(&(0x7f0000000000), 0x0) 1.739390133s ago: executing program 0 (id=2012): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x3, 0x2, 0xb, 0x7}, {0x7c, 0x6, 0x2, 0x7}, {0x816, 0x5e, 0x14, 0x3}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[]) 1.737702428s ago: executing program 1 (id=2013): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) pipe(&(0x7f00000001c0)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) read(r0, &(0x7f00000002c0)=""/186, 0xba) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) 1.729425978s ago: executing program 2 (id=2014): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x552, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) chmod(&(0x7f0000000040)='.\x00', 0x35e) 1.499457598s ago: executing program 5 (id=2015): writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0x54e}], 0x1) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34d}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000780)=@in6={0x18, 0x2, 0x9, 0xd}, 0xc, 0x0, 0x0, 0x0}, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x4, 0x0, 0xfffffffe, 0x9, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x6, 0x610}) 1.239330657s ago: executing program 6 (id=2016): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x2000004}, {0x5, 0x10, 0x4}, {0x9e, 0x18, 0x0, 0x40003}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="00041b000f3e8095043fa8985d012c000001003d0817c53fcb7c7d40b5bf661080397500", &(0x7f0000000000)=0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 1.236476122s ago: executing program 3 (id=2017): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0xfd, 0x2, 0x8}, {0x7c, 0x3, 0x82, 0x4}, {0xfffe, 0xa, 0x3, 0x2}]}) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[]) 1.233932906s ago: executing program 0 (id=2018): kqueue() setgid(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 1.2142297s ago: executing program 2 (id=2019): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000007c0)='y', 0x1}], 0x1) syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7) 1.212612131s ago: executing program 5 (id=2020): r0 = msgget(0x0, 0x300) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) mknod(0x0, 0x3a0914c44f7b202d, 0xff) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x40047477, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) 1.20768863s ago: executing program 7 (id=2021): r0 = msgget(0x2, 0xd1feed460ee53611) msgrcv(r0, &(0x7f0000000d80)={0x0, ""/239}, 0xf7, 0x2, 0x1000) msgrcv(r0, &(0x7f0000000f00)={0x0, ""/232}, 0xf0, 0x0, 0x1000) msgsnd(r0, &(0x7f0000001040)={0x2}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x1c00) 948.396477ms ago: executing program 4 (id=2022): open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = kqueue() kevent(r2, &(0x7f0000000240)=[{{r1}, 0xfffffffffffffffb, 0x45, 0xf0000000, 0xa, 0x6}], 0x1001, 0x0, 0x37, 0x0) acct(0x0) acct(&(0x7f0000000080)='./file0\x00') 500.235255ms ago: executing program 5 (id=2023): sysctl$hw(0x0, 0x0, &(0x7f0000000200)="699e8b89ff6dfd95d64962de0b202f94a8cb6087a70194827e22c09a5260e2d67ff85503f35aa38dda3c96652b438ef194f0386a7313ec", 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCCLR(r1, 0xc0a86b06, &(0x7f0000000200)={0x0, 0x10000, 0x0}) 209.69379ms ago: executing program 5 (id=2024): select(0x0, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0xc000, 0x205b9a) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x2) r0 = msgget$private(0x0, 0x206) msgrcv(r0, 0x0, 0x0, 0x0, 0x1000) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/54) 0s ago: executing program 1 (id=2025): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x0, 0x4, 0x1, {[0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x5f2aba80, 0x3, 0x800a, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffc, 0x8], [0x0, 0x6, 0x0, 0xffff, 0x3, 0x0, 0x1], [0x1, 0x0, 0x401, 0x0, 0x1, 0x80000], [{0x0, 0x1, 0x0, 0x1}, {0xfffd, 0xffffffff, 0x3ac6}, {0xfffe, 0x0, 0x5, 0xffffffffffdffffd}, {0x0, 0x0, 0xfffffffc}, {0xfffd, 0x0, 0xc8, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x10000, 0x0, 0xf}, {0x0, 0x20000, 0x1000}], {}, {0x0, 0x40000, 0x5}}}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x20000000000001df, &(0x7f0000000040)=[{0x1, 0x0, 0x7, 0x7}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r0, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. denied attempt to set clock back -9223372035093713357 seconds OpenBSD/amd64 (ci-openbsd-main-7.us-central1-b.c.syzkaller.internal) (tty00) login: load: 6.42 not a controlling terminal denied attempt to set clock back 1761064549 seconds pckbd_enable: command error pckbd_enable: command error kernel: protection fault trap, code=0 Stopped at sys_msgrcv+0x3f2: movq 0x10(%r13),%rdi ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> trace sys_msgrcv(ffff80002a799a18,ffff80002ccfd9e0,ffff80002ccfd930) at sys_msgrcv+0x3f2 syscall(ffff80002ccfd9e0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3273563c3e0, count: -3 ddb> show registers rdi 0 rsi 0x200000000f08 rbp 0xffff80002ccfd910 rbx 0 rdx 0xffff80000146b740 rcx 0 rax 0xf0 r8 0x7f7fffffc000 r9 0 r10 0xf9cb463966bb8206 r11 0x88cf9e8aa23a4e91 r12 0xfffffd8064366e60 r13 0xdead4110dead4110 r14 0xffff8000014b3b00 r15 0x8 rip 0xffffffff830e7572 sys_msgrcv+0x3f2 cs 0x8 rflags 0x10202 __ALIGN_SIZE+0xf202 rsp 0xffff80002ccfd870 ss 0 sys_msgrcv+0x3f2: movq 0x10(%r13),%rdi ddb> show proc PROC (syz-executor) tid=353361 pid=78712 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=36, usrpri=84, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7982c0,0xffff80002a7bb4e8 process=0xffff80003a928918 user=0xffff80002ccf8000, vmspace=0xfffffd806c288180 estcpu=34, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 31761 487134 75903 0 2 0 syz-executor 31761 502199 75903 0 3 0x4000080 kqsel syz-executor 76227 110413 7024 0 2 0 syz-executor 95768 240196 59755 0 2 0 syz-executor 43606 2373 63374 0 2 0 syz-executor 57206 23367 97496 0 2 0 syz-executor 57206 12182 97496 0 2 0x4000000 syz-executor 57206 10996 97496 0 2 0x4000000 syz-executor 78712 523265 99023 0 2 0 syz-executor 78712 54816 99023 0 3 0x4000080 fsleep syz-executor *78712 353361 99023 0 7 0x4000000 syz-executor 78712 450188 99023 0 2 0x4000000 syz-executor 2223 184269 78178 0 3 0 vmmaplk syz-executor 2223 174139 78178 0 3 0x4000080 ttyout syz-executor 2223 60211 78178 0 3 0x4000080 ttyout syz-executor 2223 392936 78178 0 2 0x4000000 syz-executor 2223 514882 78178 0 2 0x4000000 syz-executor 18416 171735 0 0 3 0x14200 bored sosplice 64190 483324 1 0 3 0x100083 ttyopn getty 93218 498338 0 0 3 0x14280 nfsidl nfsio 46494 374429 0 0 3 0x14280 nfsidl nfsio 24706 358615 0 0 3 0x14280 nfsidl nfsio 38670 176612 0 0 3 0x14280 nfsidl nfsio 33065 495405 0 0 3 0x14280 nfsidl nfsio 65366 442509 0 0 3 0x14280 nfsidl nfsio 87645 121468 0 0 3 0x14280 nfsidl nfsio 75939 364938 0 0 3 0x14280 nfsidl nfsio 77584 331079 0 0 3 0x14280 nfsidl nfsio 73044 42740 0 0 3 0x14280 nfsidl nfsio 27172 450676 0 0 3 0x14280 nfsidl nfsio 44577 506309 0 0 3 0x14280 nfsidl nfsio 84870 141783 0 0 3 0x14280 nfsidl nfsio 51507 394889 0 0 3 0x14280 nfsidl nfsio 21831 423847 0 0 3 0x14280 nfsidl nfsio 8136 118044 0 0 3 0x14280 nfsidl nfsio 15616 416579 0 0 3 0x14280 nfsidl nfsio 71411 321606 0 0 3 0x14280 nfsidl nfsio 62285 265540 0 0 3 0x14280 nfsidl nfsio 34906 353687 0 0 3 0x14280 nfsidl nfsio 99023 422894 29641 0 3 0x82 nanoslp syz-executor 63374 1253 29641 0 3 0x82 nanoslp syz-executor 75903 434462 29641 0 3 0x82 nanoslp syz-executor 97496 404734 29641 0 3 0x82 nanoslp syz-executor 59755 190 29641 0 3 0x82 nanoslp syz-executor 78178 68062 29641 0 3 0x82 nanoslp syz-executor 5949 288590 29641 0 2 0x2 syz-executor 7024 361095 29641 0 3 0x82 nanoslp syz-executor 29641 146946 37834 0 3 0x82 kqread syz-executor 37834 181515 92182 0 3 0x10008a sigsusp ksh 92182 336300 11120 0 3 0x98 kqread sshd-session 11120 468790 98522 0 3 0x92 kqread sshd-session 98522 216576 1 0 3 0x88 kqread sshd 88426 269232 5377 73 3 0x1100090 kqread syslogd 5377 358423 1 0 3 0x100082 sbwait syslogd 30750 79235 1 0 3 0x100080 kqread resolvd 12916 98418 21912 77 3 0x100092 kqread dhcpleased 13600 426016 21912 77 3 0x100092 kqread dhcpleased 21912 82840 1 0 3 0x80 kqread dhcpleased 69688 112406 0 0 3 0x14200 bored smr 80034 332076 0 0 2 0x14200 zerothread 2562 470529 0 0 3 0x14200 aiodoned aiodoned 41303 299869 0 0 3 0x14200 syncer update 86248 494726 0 0 3 0x14200 cleaner cleaner 69511 453154 0 0 3 0x14200 reaper reaper 35510 371544 0 0 3 0x14200 pgdaemon pagedaemon 35956 282034 0 0 3 0x14200 bored viomb 60184 335266 0 0 3 0x40014200 acpi0 acpi0 13532 345936 0 0 3 0x14200 bored softnet0 25790 27678 0 0 3 0x14200 bored systqmp 73507 398620 0 0 3 0x14200 bored systq 52742 457330 0 0 3 0x40014200 tmoslp softclock 43478 122672 0 0 3 0x40014200 idle0 1 500019 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10171 11041K 11245K 166960K 12069 0 pcb 17 12K 12K 166960K 154 0 rtable 226 7K 8K 166960K 456 0 pf 28 12K 13K 166960K 111 0 ifaddr 37 6K 8K 166960K 78 0 ifgroup 46 2K 2K 166960K 159 0 sysctl 3 1K 9K 166960K 12 0 counters 31 17K 18K 166960K 62 0 ioctlops 0 0K 4K 166960K 104 0 iov 0 0K 16K 166960K 35 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1331 84K 84K 166960K 1958 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 12 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 17 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 97K 166960K 2154 0 sigio 0 0K 0K 166960K 7 0 proc 60 59K 124K 166960K 532 0 subproc 72 4K 4K 166960K 74 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 114 0 in_multi 84 6K 7K 166960K 126 0 ether_multi 1 0K 0K 166960K 8 0 mrt 1 0K 0K 166960K 7 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 406 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 219 158K 173K 166960K 19880 0 UVM aobj 18 4K 4K 166960K 20 0 pinsyscall 38 76K 96K 166960K 3236 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 22 0 NDP 10 0K 2K 166960K 57 0 temp 59 8647K 8714K 166960K 32835 0 kqueue 13 20K 26K 166960K 178 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 94 0 91 1 0 1 1 0 8 0 rtentry 136 126 0 28 4 0 4 4 0 8 0 unpcb 144 354 0 339 1 0 1 1 0 8 0 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 736 181 0 177 1 0 1 1 0 8 0 arp 96 21 0 4 1 0 1 1 0 8 0 ipq 40 8 0 8 1 0 1 1 0 8 1 ipqe 40 13 0 13 1 0 1 1 0 8 1 inpcb 328 507 0 500 3 1 2 2 0 8 1 ip6q 72 10 0 10 1 0 1 1 0 8 1 ip6af 40 18 0 18 1 0 1 1 0 8 1 nd6 112 27 0 7 1 0 1 1 0 8 0 pkpcb 40 8 0 8 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 14 0 14 1 0 1 1 0 8 1 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 498 0 99 29 0 29 29 0 8 2 art_table 40 502 0 99 5 0 5 5 0 8 0 art_node 32 124 0 35 1 0 1 1 0 8 0 sysvmsgpl 40 12 0 9 1 0 1 1 0 8 0 semupl 112 3 0 3 1 0 1 1 0 8 1 semapl 112 13 0 3 1 0 1 1 0 8 0 shmpl 112 17 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 4326 0 2839 95 0 95 95 0 8 0 ffsino 256 4326 0 2839 95 0 95 95 0 8 0 nchpl 144 6757 0 5073 63 0 63 63 0 8 0 vnodes 216 4697 0 0 261 0 261 261 0 8 0 namei 1024 16408 0 16407 3 1 2 2 0 8 1 kstatmem 264 82 0 62 2 0 2 2 0 8 0 scsiplug 72 6 0 6 1 0 1 1 0 8 1 scxspl 216 20984 0 20984 9 1 8 8 1 8 8 plimitpl 152 90 0 74 1 0 1 1 0 8 0 sigapl 424 2466 0 2403 8 0 8 8 0 8 0 knotepl 120 80456 0 80409 17 7 10 17 0 8 7 kqueuepl 184 193 0 183 1 0 1 1 0 8 0 pipepl 304 141 0 114 3 0 3 3 0 8 0 fdescpl 448 2431 0 2402 5 0 5 5 0 8 1 filepl 120 5729 0 5523 7 0 7 7 0 8 0 lockfpl 104 288 0 286 1 0 1 1 0 8 0 lockfspl 48 127 0 125 1 0 1 1 0 8 0 sessionpl 144 22 0 14 1 0 1 1 0 8 0 pgrppl 48 34 0 18 1 0 1 1 0 8 0 ucredpl 104 760 0 749 1 0 1 1 0 8 0 zombiepl 144 3030 0 3030 2 1 1 1 0 8 1 processpl 1152 2466 0 2403 5 0 5 5 0 8 0 procpl 664 5152 0 5078 7 0 7 7 0 8 0 sockpl 552 972 0 947 4 1 3 3 0 8 1 mcl64k 65536 552 0 552 3 0 3 3 0 8 3 mcl16k 16384 372 0 372 1 0 1 1 0 8 1 mcl12k 12288 379 0 379 1 0 1 1 0 8 1 mcl9k 9216 144 0 144 2 1 1 1 0 8 1 mcl8k 8192 690 0 690 2 1 1 1 0 8 1 mcl4k 4096 6933 0 6882 16 8 8 15 0 8 1 mcl2k2 2112 2 0 2 1 0 1 1 0 8 1 mcl2k 2048 607 0 606 3 1 2 2 0 8 1 mtagpl 96 5 0 4 2 1 1 1 0 8 0 mbufpl 256 29072 0 28897 133 111 22 78 0 8 8 bufpl 280 5388 0 121 377 0 377 377 0 8 0 anonpl 24 300216 0 297357 49 3 46 46 0 187 17 amapchunkpl 152 66888 0 66456 29 1 28 28 0 158 10 amappl16 200 5448 0 5417 33 21 12 16 0 8 8 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 5 0 5 1 1 0 1 0 8 0 amappl13 176 405 0 404 1 0 1 1 0 8 0 amappl12 168 2775 0 2737 2 0 2 2 0 8 0 amappl11 160 33 0 32 1 0 1 1 0 8 0 amappl10 152 69 0 59 1 0 1 1 0 8 0 amappl9 144 263 0 263 1 1 0 1 0 8 0 amappl8 136 25 0 24 1 0 1 1 0 8 0 amappl7 128 85 0 84 1 0 1 1 0 8 0 amappl6 120 265 0 254 1 0 1 1 0 8 0 amappl5 112 70 0 63 1 0 1 1 0 8 0 amappl4 104 380 0 358 1 0 1 1 0 8 0 amappl3 96 12494 0 12413 3 0 3 3 0 8 0 amappl2 88 2544 0 2477 2 0 2 2 0 8 0 amappl1 80 17208 0 16669 13 0 13 13 0 8 1 amappl 88 19056 0 18905 5 0 5 5 0 92 0 uvmvnodes 80 4697 0 0 96 0 96 96 0 8 0 dma65536 65536 2 0 2 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 0 1 1 0 8 1 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 19 0 2 1 0 1 1 0 8 0 uaddrrnd 24 2431 0 2402 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2431 0 2402 1 0 1 1 0 8 0 vmmpekpl 168 17585 0 17555 2 0 2 2 0 8 0 vmmpepl 168 148621 0 146861 97 6 91 91 0 357 12 vmsppl 368 2430 0 2402 4 1 3 4 0 8 0 rwobjpl 40 40525 0 34995 56 0 56 56 0 8 0 pdppl 4096 4869 0 4804 125 58 67 83 0 8 2 pvpl 32 998022 0 990056 119 3 116 116 0 265 39 pmappl 216 2430 0 2402 3 0 3 3 0 8 1 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 528 0 184 12 0 12 12 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace sys_msgrcv(ffff80002a799a18,ffff80002ccfd9e0,ffff80002ccfd930) at sys_msgrcv+0x3f2 syscall(ffff80002ccfd9e0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3273563c3e0, count: -3 ddb> machine ddbcpu 1 No such command ddb> trace sys_msgrcv(ffff80002a799a18,ffff80002ccfd9e0,ffff80002ccfd930) at sys_msgrcv+0x3f2 syscall(ffff80002ccfd9e0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3273563c3e0, count: -3