kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Tue Dec 17 08:12:14 PST 2019 OpenBSD/amd64 (ci-openbsd-setuid-0.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.255' (ECDSA) to the list of known hosts. 2019/12/17 08:12:24 fuzzer started 2019/12/17 08:12:30 dialing manager at 10.128.15.235:24129 2019/12/17 08:12:30 syscalls: 337 2019/12/17 08:12:30 code coverage: enabled 2019/12/17 08:12:30 comparison tracing: enabled 2019/12/17 08:12:30 extra coverage: support is not implemented in syzkaller 2019/12/17 08:12:30 setuid sandbox: enabled 2019/12/17 08:12:30 namespace sandbox: support is not implemented in syzkaller 2019/12/17 08:12:30 Android sandbox: support is not implemented in syzkaller 2019/12/17 08:12:30 fault injection: support is not implemented in syzkaller 2019/12/17 08:12:30 leak checking: support is not implemented in syzkaller 2019/12/17 08:12:30 net packet injection: enabled 2019/12/17 08:12:30 net device setup: support is not implemented in syzkaller 2019/12/17 08:12:30 concurrency sanitizer: support is not implemented in syzkaller 2019/12/17 08:12:30 devlink PCI setup: support is not implemented in syzkaller 08:12:33 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0xb05e1a8b604dee2f) ioctl$WSDISPLAYIO_GMODE(r0, 0x4004574b, &(0x7f0000000040)) ioctl$KDSETRAD(r0, 0x20004b43) getuid() r1 = socket$inet6(0x18, 0x2, 0x5d) bind(r1, &(0x7f0000000080)=@in={0x2, 0x3}, 0xc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x1, 0x0) getpeername$inet6(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc) r3 = socket$inet6(0x18, 0x4, 0x7) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r4 = dup2(0xffffffffffffff9c, r2) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/wsmouse\x00', 0x80, 0x0) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000240)='/dev/wskbd0\x00', 0x10000, 0x0) r7 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/wskbd\x00', 0x40, 0x0) r8 = accept$inet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0xc) poll(&(0x7f0000000340)=[{r3, 0x10}, {r4, 0x10}, {r5, 0x1}, {r6, 0x4}, {r7, 0x40}, {r8, 0x20}], 0x6, 0x12) rename(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') r9 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffffff) fcntl$dupfd(r9, 0xa, r5) ioctl$PCIOCGETROM(r4, 0xc0107005, &(0x7f0000000440)={{}, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0]}) socket(0x10, 0x1, 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffff9c, 0x80185760, &(0x7f00000004c0)={0x7f, 0x81, {0x0, 0x5}}) ioctl$TIOCGTSTAMP(r4, 0x4010745b, &(0x7f0000000500)) r11 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0xa80, 0x260) r12 = accept(r10, &(0x7f0000000580)=@in, &(0x7f00000005c0)=0xc) dup2(r11, r12) r13 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000600)='/dev/bpf\x00', 0x200, 0x0) ioctl$BIOCSRSIG(r13, 0x80044272, &(0x7f0000000640)=0x3) close(r0) 08:12:33 executing program 1: clock_getres(0x0, &(0x7f0000000000)) ioctl$KDSETRAD(0xffffffffffffff9c, 0x20004b43) r0 = msgget$private(0x0, 0x100) msgrcv(r0, &(0x7f0000000040)={0x0, ""/157}, 0xa5, 0x3, 0x1400) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000100)={'./file0\x00', 0x1, 0x7, 0x3f, 0xedce2d81cb2825d6, 0xffffffff, 0x5, 0x3347, 0x1, 0x2, 0x1f, 0x5984}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/wsmouse0\x00', 0x8, 0x0) ioctl$WSMOUSEIO_SETMODE(r1, 0x80045726, &(0x7f00000001c0)) msgrcv(r0, &(0x7f0000000200)={0x0, ""/212}, 0xdc, 0x1, 0x1000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x100, 0x0) ioctl$TIOCCDTR(r2, 0x20007478) geteuid() r3 = open(&(0x7f0000000340)='./file0\x00', 0x8, 0xc2a8bb104370c719) ioctl$TIOCSTSTAMP(r3, 0x8008745a, &(0x7f0000000380)={0x7ff, 0x8000}) r4 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@un=@file={0x0, ""/26}, &(0x7f0000000400)=0x1c) r5 = dup(r4) fcntl$getown(0xffffffffffffff9c, 0x5) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, &(0x7f0000000480)=0x8) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f00000004c0), &(0x7f0000000500)=0xc) r7 = dup2(0xffffffffffffff9c, r1) ioctl$WSKBDIO_GETMODE(r7, 0x40045714, &(0x7f0000000540)) socketpair(0x20, 0xc002, 0x0, &(0x7f0000000580)) r8 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f00000005c0), 0xc) linkat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', r8, &(0x7f0000000640)='./file0\x00', 0x6) r9 = accept(r2, &(0x7f0000000680)=@in, &(0x7f00000006c0)=0xc) getsockopt$SO_PEERCRED(r9, 0xffff, 0x1022, &(0x7f0000000700), 0xc) execve(&(0x7f0000000740)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000780)='/dev/zero\x00', &(0x7f00000007c0)='/dev/wsmouse0\x00', &(0x7f0000000800)='\x00'], &(0x7f0000000a00)=[&(0x7f0000000880)='/dev/wsmouse0\x00', &(0x7f00000008c0)='/dev/wsmouse0\x00', &(0x7f0000000900)='/dev/wsmouse0\x00', &(0x7f0000000940)='.:\xfb\\\x00', &(0x7f0000000980)=')-\x00', &(0x7f00000009c0)='\'\x00']) r10 = socket$unix(0x1, 0x0, 0x0) ioctl$FIOASYNC(r10, 0x8004667d, &(0x7f0000000a40)=0x10) ioctl$TIOCGETD(r5, 0x4004741a, &(0x7f0000000a80)) 08:12:33 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000740)="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", 0x1ef}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)="0ec465cdab1ab6925cb81235dbb17399c070dde203e502106f690d9947364fe3569560e73bfa9012263c0ef6eb626ad79d51e7b4607879072ca33809a85443bef8e011b3e2e63de6f9637ca6e422106a6a1762b67f560814eef6dcb3f39a2e51600251fbad1ee82088a75ca3764729af3f3d4d967ce8aadb3c3fd7f9ae4f4c83b2", 0x35a}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, r0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) rmdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000200)=0xc) unveil(&(0x7f0000000240)='\x00', &(0x7f0000000280)='r\x00') 08:12:34 executing program 0: nanosleep(&(0x7f0000001c40)={0xf0, 0x7fefffff}, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0xf8b4, 0x0, 0x10000fe, 0x0) r1 = kqueue() socket(0x38, 0x8000, 0x3f) kevent(r1, &(0x7f0000000240), 0xffc, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:12:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x100000000000000a, &(0x7f0000000040)='\x00', 0x1) dup2(r2, r1) connect$unix(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r3 = dup(r0) sendto$inet6(r3, &(0x7f0000000040), 0xffc9, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "f900002000000043e76619000000000010ba00"}) socket(0x18, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 08:12:34 executing program 1: r0 = syz_open_pts() r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x29, 0x9, &(0x7f0000000000)="03000000", 0x4) setsockopt(r1, 0x29, 0x80000000000000d, &(0x7f0000000180), 0x14) sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000000)=@file={0x2, './file0\x00'}, 0xa, &(0x7f0000000240)=[{&(0x7f0000000040)="5265f5fd449aee4022e38f65d152ee767e8852f8d703e97eb29272b3457e2e4299c442e8b8b3ca15ef0708419db8d2f49b5197453cc08b605871d874f85cecdadb7be5b7ad2d543c0f954d29542cde08f9a0862d2474dab0693491a037150fa139bb83b26347b7d71537dc0db5b3cea6c68b2b09877dbab43a02a8214a7d1cc80f908012221cfa81bcf720ba793a7f5a79655d3f8098", 0x96}, {&(0x7f0000000100)="a65a217854886bc8996bce8e7ddafece9b0c75b2aa3f899ac45d7cb95f2bba066b4e00925d54aee104ce8bbb3a5b528e7fe60bd4b1d701ba9d988f91f9d98ceed67510701b6ec26cabfee9aac9bd5c57044fa2fa99f889fee4674a48e48bdefc632b4ed8cf5a5524efe9e206bf01ed5e3b7c860903529ec883272efab58ce245cc572966267851c37d0856ff12af3e1b9bed64da8d80839e4f0ab494d4b23b", 0x9f}, {&(0x7f00000001c0)="8d858e77343ad7b55841b130210c1c8cf5f0165489589db0749307f727fd942a7a4342be562a51a66d6437cbae828cc6293849217e45eb76ad9ba977c91b99db93d453e2cc4450e280fb371112c33c3be201e6a6d61c4cb7da91059debdf828f9c", 0x61}], 0x3, 0x0, 0x0, 0x8}, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001300)=[{{r0}, 0xfffffffffffffffe, 0x69}], 0x0, 0x0) nanosleep(&(0x7f0000001c40)={0x1, 0x7feffffe}, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0xf8b1, 0x0, 0x10000fe, 0x0) kevent(r2, 0x0, 0x0, &(0x7f0000000100), 0x1f, 0x0) 08:12:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000026ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2, 0x0}, 0x40) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000080)=""/52, 0x34}], 0x1, 0x0}, 0x0) r2 = socket(0x10000000002, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f00000000c0)=0x3, 0x4) write(r1, &(0x7f0000000000)="87", 0x1) close(r1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCEXCL(r3, 0x2000740d) 08:12:35 executing program 1: r0 = syz_open_pts() r1 = kqueue() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x2, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x100000000000000a, &(0x7f0000000040)='\x00', 0x1) dup2(r4, r3) connect$unix(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) dup2(r3, r2) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r5 = dup(r2) sendto$inet6(r5, &(0x7f0000000040), 0xffc9, 0x0, 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x100, 0x0) ioctl$VMM_IOC_INTR(r6, 0x800c5606, &(0x7f00000000c0)={0x3, 0x3, 0x9}) kevent(r1, &(0x7f0000000080)=[{{r0}, 0xffffffffffffffff, 0xb}], 0x0, 0x0, 0x1f, 0x0) poll(&(0x7f0000000000), 0x2313, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f0000000140)="66185d3f1b9f5e79dd941443c948cc2b1a96d3a0fe16f835ff11e3ea4f1b79bae787fececdd49f1ae01a2bc95ecff6c5193bd75b4dabb8c9b7039562a766b892b0d10de62feefed38b94e6c82882ca7f34c12ff0a41fa07da278dcd358ea793f746436ac7cc7ea45f53565d22872c948933e3bfc8e21e37f7b5d25affcc66095de6858ffb142c569a99c6375dba34f30875654553a6dd69ec81e5eaaf2991dd4f346d8297b02bd83be3653697820b35e7cfa9f5c6f258e236998cb1ef188c16904bf7e6a945f3d6aaacc8e781aecd840653864e6516529e66be5262fca6a30b83b11c527c786", 0xe6}, {&(0x7f0000000240)="08f27a21c5d2c2a6915eb539112661d0f78ff070568bcfc6146652e77af77a42c2560cf0375d4e39428490f0ee900a4be304c8c7720ef3f944f0a5f5b5600121bcb801b2b02d253d90efab67ef188265e0ff8bf8f19f2d426205e60b1a6babbc3c8f24469f7104cfb28cf7b554fefc4431fb8cadb90c52c7e6244d80ba2f3fab9ca774428e28f08fc1fce32127b5a00c99a1be720ec825436367be422b141870e7871caef2e6bc657031b3c997f5cadd65409a346d899f6e14dc137286ac7af6ee8ecb5de9406cb003f437e5df53b7550296d85297", 0xd5}, {&(0x7f0000000340)="45dd67f9bf91e247dec18ff538061f98afadbc8082dccba0cff92246f9d928bff290ae625f24bfde8a4a8ab30b4c9fd6326cc0b0e35de8ff61417ce4deca8667249eb39e1737d35e835fd48f29391bfcfc8fbc8ca0f13ca34c70ebb62dd52ca9c225db20e16f76a8807958a79a6b7a3d12894502a04001d5c5c626cc0a2c8edf6c", 0x81}, {&(0x7f0000000400)="1976b705c4e870fbe06279d64ecbc16582e44e5789d3a7aa", 0x18}, {&(0x7f0000000440)="1d2cf1a79613cedc915874c4d479e527e89a86236479ef2f518e86f78fbc490f788d90c9b8c04195ba3763ff8e68d4e1611bbfb569fbf4cb1c064a2e836785978d735661a1c86a815ec42d681cffecbd609d04813312044ff3d2c2e6b5d728b5d1e7b071ffcf2448edbad5be4a1ce077e9bd416c88dd3f0d406d8ebe5556cee487f1af5eff45eb86680344d4c59529617f1448ca1b39feecde3c343c24d1e040e5af5ce8c26e671b1e53cbba9c983d468007810ed82d3ba16b2aa2515c51933edb7b67231cca0a9b0831c48ad88e6d3b650da9764149c8", 0xd7}, {&(0x7f0000000540)="af43c3d853a68b023950cc5ffb150ac73fe8ec9ecdd31f3d223cf73f7b46af95b459c787af298e3da0b23b5dfc2611ae96c3df0781bf19a1bde296271e1abf96213c37e26dde6bd9407cd9c47a11eb099039a8bde186a06739f7b9d042a676b9c35cf12e9617446601cbd0d5a6b107ab2a91cdf46c5449196a0bb5a0c4afb35950db222951b4a385eb853b6252afec9b470575ddc7b776cdcad198b46f31e28e7947cd134224db507c83979df5aff4c78a3db13c123354b8a478f5f50fc9eba89d78414e3497755c28ba50c8b4f4db", 0xcf}], 0x6, 0x0, 0x1) dup2(r0, r1) 08:12:35 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x60e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2, 0x1000000008002, 0x0) connect$unix(r3, &(0x7f0000001100)=ANY=[@ANYBLOB="82022e2fac1400ab7d81b0a5ed56c0c0c7a8c14017c92a3953ff2b0f80981ade610ba108e59e940e6d8ccf9b1bcc9d5d0cdb02000000c75b3202000000a2aacf1b001553e098973c85ceb7d135bfd18a07634d3910e956ea948281d66d4c50432ad91508000cf85f8783602a67897cff7f000000000000f371e8cfaa1d4ab424b614911f88d3525e34e763128666ee7877bf9753b6bdae4c5b436e445960fa6b980ac1ba4aab44f0323348f261b51f15ee1620b4d2009fe508528e0000752fd96cb58d127addb390071baff955a58c179770ce1f000000d940682065385ec5c9762c34c7881a9506ffc85e43782e717e29127ca8c256b248000000006bea130879264ab70bf9c0aa0eb72598cb90fd03b162460c683ff8a85a93ad6fb2ce6263185505cc059fef6bef339f78b4f9da521ee1e53fd26f52249c901f022f19975028aed2b700c9076d0612112dd4db4a40bb3c7f82fd7c8d54e904d389e61651a28671f6aaacfcff282f7ec1a852494e378081f231927b35672f0c214b5cac7db956b7fa3158d2dc0f679159e040bc31a8529000b88e516809ccf0cfef09b6348ce400095bb49d06bf62577f46c840d34b6362e9f9810cfec14d447dadc21aa457b780274e6e68e9c11aafa3f23f0e31941c0a490c909eb5221c0885236c6c40481db84295fad7e776a2b1f04e2a71c4d06bcc2a72bb272a9eb7d255410a663e9196930f7b6c9867ef274484fffad868e059f2804a365f01f6701355c0a1900000009137e3f0e7a5f89b68cf7c65b7ada72c808d000068318e4fa7cb04cace50d549e7e752a3828ceec5948c15b42139f49354a211039146905d202634626670e584885cd5c53ac73465afaab1cd39be95373a87ca277d106490a95d3d8139a789eb2f861d9f834c274a19392429d476bde11689127431fcd756a8c3371a5f12beabd87b043e8b94df6542a868993f31f970cf9081e0b2f13f03a0776ec2eed29ed2709c068fb3ea586bee5c3bc1dec12052fa12fc688f7de2efba940f8e65918932829c030000000000000000f003d28b86e5b8f9983f49000000000000000073ab30cba944b5927efd33d319ed0d4537e6000000000000e2eaf9ba91b98365d6d337561564d2c4c7b45d87639f69c2b83d9fb892f6aea66ac2c632eee0bb5b086a0edda19af759e4905cdcddfb02696fd79769fb05347de39d9fa81504ce2ddd948b0ddab3f47e15c7f51c88a73831148eb67f7da113f50deb0a7a5a8132ef2b6d9aca7b2a6906d871a780b2e7548681231afafc3c752f2661acd9aad49386e15cecbced71693f00000000000000e4053a5103684be538c40e46b0993641250b7e69860f55da25404e6489500fef1f90532eb9e0840618fdc7f9fb467655f83d401fe57ee86fa642e9bad7ed751d79d3cbb15058810b243e38c7723358643889de02d97da9d096637071666cfbf0259fc5b9321f5a3b0552cea32380954ff38932dd10b70cb044cb97cf201ab4fa56e9f41d447f5ff588520f3f7cbf229cc322f1fcbea40a9be720dcb67df99ae37b51b9020000000005000070a08059947700000000f282ebea0ea0e3cff50258a2b04c9cdebab09df2ebf0ceaa8d264282aba8256155ba5529eb2f1c311d3fdb2a50ff294204e837acead22c5099d8104cb4e5cf2bd7376bdcc99d2e10e5eb5df707d876bb598905401311ce37b2a002422837255932851bac20b69e285e6ea829481de1dcfedfd6ba7e79a4ac39ffc89597c07bc44a581387dc8c6ddcf01fa61e6e50f7c51a2d8aa8f88f265b5600d841f85fe4e98eefb0ad1cb2147e154be17a6ca5c9ca702bbb4772cabbbbb70209affa17f98440f0b0c1e54ff0f998c8a4c8e382591cd37534df534a458c97b7e6d9cee07c6f2630d1a137ef699461e520d70614d848745b3d2acce8a5fe894d33dc8f904ef0eb5ac109c57e97cdb0c78092b66fa03f096e242fd3f9e6bb8009008c2d674f364ed79f70034a59c4692e711c671274276e0c128435721d84e5d8398ad78f9735cdc7deba70a6982fe7660713d7be4b5ec92f418c373a9e04d40cde7314b50dda5c30146906d84d65e2ff02e77dcca8cc7722a84bb0431a1c0be11ca979cccd1975741f226167ba662fa6c329112fa7eb9787463da03047e267a0d232f4381b8e4030905938a64abc6d90ece6f0704406cdb53701e315f63734f822cccc9e14aceccc824d5db4cf9adfba5620f6c61e04000000696eb0a79222189068ad203a59277c1c148fde018da47e3b15df6dce906df52e610dc1779265c570b26fb81768d1d2c040832b1b393b06997c812f920c4b36659780bb73b057c7fa673296bfd14a111245905b98c4dd6a7b8366e3f94730ae2d5775df11d564612561ec7ff1799c2e1262d58c91c38c993d3fb78e178e101d966f3dd071d08a490000000000000000c33bc738a8c1ab3d33c496194ee1dd42000adfc74c2d3bb43b2e6c47b273b3f7903a62b24e473545e597baaef6d539a1efc08d3046f41083897f1858c8001ac0d915af3f7b3171c14f936df59a2fcd4cfb8cd15b7c3c4e40a6d622504dd0aa947a52f21f27e3a3e63750c03c009e63922b0bb75fe912805be9b86e169d58986e063ed7f133b1b7fb46514ebd59ebf8176d056008dceb3fa0053fe7e1b866d3f445157a6c05a393039b8f032a0d101aa4ad723df01e5a2a079c0598f9298d906bcc21e75d683e6b5f6ce4cb811612054a6a8be9e18cbce5604301008a2dedc257fdeb4128982913bb7291388c07f8f1e499a1c6b2c39871f0ed42a8b59ee0b5bc9f3e1212d9c400000000000000000000000000e522903e088c87a8aa62a84554e4ce419951e62c8ee7e435bcf62d522d0e23503e6e9dc6ea666b2ce4b60a46a198c2117da5819d4fac16783648bd3eff702490229c4bf079345744ca47a4a611a95e40f900"/2115], 0x10) r4 = dup2(r3, r1) r5 = socket(0x10000000002, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f00000000c0)=0x3, 0x4) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt(r6, 0x0, 0x8000000000004, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt(r7, 0x0, 0x8000000000004, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt(r8, 0x0, 0x8000000000004, 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x200b0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0x284) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0x66, &(0x7f0000000480)={0x6e0e, 0x1, 0xffffffffffffffeb, 0x9f56, 0xa}, 0x384) r13 = fcntl$getown(r9, 0x5) r14 = shmget$private(0x0, 0x2000, 0x310, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r14, 0x1, &(0x7f0000000540)={{0x240000000, r11, r12, r11, r12, 0x20, 0x2}, 0xffffffff00000000, 0x7fff, r10, r13, 0x41d, 0x5, 0x5}) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0}, 0xc) r16 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x200b0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0x284) setsockopt$inet6_MRT6_ADD_MIF(r16, 0x29, 0x66, &(0x7f0000000480)={0x7, 0x1, 0xffffffffffffffeb, 0x9f56, 0xa}, 0x10f) r20 = fcntl$getown(r16, 0x5) r21 = open$dir(&(0x7f0000001240)='./file0\x00', 0x400000002c4, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r21, 0x0, 0x0) r22 = fcntl$getown(r21, 0x5) r23 = shmget$private(0x0, 0x2000, 0x310, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r23, 0x1, &(0x7f0000000540)={{0x240000000, r18, r19, r18, r19, 0x20, 0x2}, 0xffffffff00000000, 0x7fff, r17, r20, 0x41d, 0x5, 0x5}) r24 = getuid() setreuid(r24, 0xffffffffffffffff) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x3, 0x0, r19, r24, 0x0, 0x1c4, 0x80000000}, 0xd, 0x100, r20, r22, 0x0, 0x92, 0xffff}) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000280), 0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r27 = fcntl$getown(r3, 0x5) r28 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) r29 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x200b0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0x284) setsockopt$inet6_MRT6_ADD_MIF(r29, 0x29, 0x66, &(0x7f0000000480)={0x7, 0x1, 0xffffffffffffffeb, 0x9f56, 0xa}, 0x10f) r33 = fcntl$getown(r29, 0x5) r34 = open$dir(&(0x7f0000001240)='./file0\x00', 0x400000002c4, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r34, 0x0, 0x0) r35 = fcntl$getown(r34, 0x5) r36 = shmget$private(0x0, 0x4000, 0x401, &(0x7f0000ffc000/0x4000)=nil) semctl$IPC_RMID(r36, 0x0, 0x0) shmctl$IPC_SET(r36, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r36, 0x2, &(0x7f0000000040)=""/210) shmat(r36, &(0x7f0000ffc000/0x2000)=nil, 0x2000) r37 = geteuid() shmctl$IPC_SET(r36, 0x1, &(0x7f0000000540)={{0x240000000, r31, r32, r37, r26, 0x61, 0x2}, 0xffffffff00000000, 0x7fff, r30, r33, 0x7fff, 0x5, 0x5}) r38 = getuid() setreuid(r38, 0xffffffffffffffff) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x3, 0x0, r32, r38, 0x0, 0x1c4, 0x80000000}, 0xd, 0x100, r33, r35, 0x0, 0x92, 0xffff}) r39 = getuid() r40 = socket(0x0, 0x0, 0x0) r41 = semget$private(0x0, 0x4, 0x1000100d3) semop(r41, &(0x7f0000000380)=[{0x1, 0x5a, 0x800}, {0x2, 0x0, 0x1800}, {0x2, 0x5, 0x1800}, {0x2, 0x7}, {0x3, 0x9}, {0x3, 0xe8, 0x1800}, {0x3, 0x9, 0x1800}, {0x2, 0x5, 0x800}, {0x1, 0x1, 0x1800}], 0x9) semop(r41, &(0x7f00000000c0)=[{0x3, 0x7fffffff, 0x800}, {0x1, 0x6f, 0x1000}, {0x1, 0x4, 0x1000}, {0x4, 0x1, 0x1800}, {0x0, 0x1, 0x800}, {0x3, 0x7f, 0x1000}, {0x7, 0x80000000}, {0x3, 0x8, 0x1000}, {0x2, 0x8e, 0x1800}, {0x3, 0x7}], 0xa) getsockopt$sock_cred(r40, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r43 = getuid() r44 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x200b0, 0x1) getsockopt$sock_cred(r28, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) setsockopt$inet6_MRT6_ADD_MIF(r44, 0x29, 0x66, &(0x7f0000000480)={0x7, 0x1, 0xffffffffffffffeb, 0x9f56, 0xa}, 0x10f) r48 = fcntl$getown(r44, 0x5) r49 = open$dir(&(0x7f0000001240)='./file0\x00', 0x400000002c4, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r49, 0x0, 0x0) r50 = fcntl$getown(r49, 0x5) r51 = shmget$private(0x0, 0x2000, 0x310, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r51, 0x1, &(0x7f0000000540)={{0x240000000, r46, r47, r46, r47, 0x20, 0x2}, 0xffffffff00000000, 0x7fff, r45, r48, 0x41d, 0x5, 0x5}) r52 = getuid() setreuid(r52, 0xffffffffffffffff) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x3, 0x0, r47, r52, 0x0, 0x1c4, 0x80000000}, 0xd, 0x100, r48, r50, 0x0, 0x92, 0xffff}) r53 = getuid() setreuid(r53, 0xffffffffffffffff) semctl$IPC_SET(r41, 0x0, 0x1, &(0x7f0000000280)={{0x9029, r53, r42, r43, r47, 0x20, 0x7}, 0x4, 0x5, 0x5}) sendmsg$unix(r28, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="03ddbf7c29b75bf31c01"], 0xa, &(0x7f00000002c0)=[{&(0x7f00000001c0)="9c93d8ae06f4264c7ed4f012409ca41c17249dc3f3eb1d50c50e1e512722a3d638812fdf84ce9884d5debeaaf19079b1e70852d93adab472b52db766602bc08f6a224ad7ca608e635710240e6b6c408b4d39f86f4a9ad8a10f9565984387c07cbba6d5ebeedcdb89fff892552f3349fe9349682bbbe4aa4bb98a899e7e1004ff7137b5d9c4c8537caad0caadd66daab47bfab0d7621f28a52c7dbacde9af58bdb63245a415e636fc96a8042f20cfb9bbff5e59480f79455df96b6fe3bdd571516bd8546560587a9ba37de6c40341d05e9dae831e3f915cb0cbd231ae1ba778c997fda8c0b9d1", 0xe6}], 0x1, &(0x7f0000000300)=[@cred={0x20, 0xffff, 0x0, r35, r39, r42}], 0x20, 0x1}, 0x806) sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000200)=[{&(0x7f00000000c0)="91f2a51524a50e07fe358a841fc8968b5b", 0x11}, {&(0x7f0000000100)="79980f25", 0x4}, {&(0x7f0000000140)="b54d458b92bb5af7b26a91c4ba84ba004bb4ed58271ca8fc70ea18965a70a9698bb635f8cdc1915459fa4d14e04501310de69d3821d93ce71e31a063970ad19a527337a6d5faefd9acbff95a4f14560af36701d65b3808590bd625039e7ffeb8403e33c212895e0bed67332b4b7ef86ca6cb520def73792bbd1d9406fc356a96c34751951c28c9dcbbe847d5d41eb9e5318bc78050e985b56482ea7401355d4d3392391d9454", 0xa6}], 0x3, &(0x7f0000000340)=[@rights={0x20, 0xffff, 0x1, [r6, r7, r8, 0xffffffffffffffff]}, @cred={0x20, 0xffff, 0x0, r10, r15, r19}, @cred={0x20, 0xffff, 0x0, 0x0, r25}, @cred={0x20, 0xffff, 0x0, r27, 0xffffffffffffffff, r42}], 0x80, 0x8}, 0x4) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r55 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x200b0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0x284) setsockopt$inet6_MRT6_ADD_MIF(r55, 0x29, 0x66, &(0x7f0000000480)={0x7, 0x1, 0xffffffffffffffeb, 0x9f56, 0xa}, 0x10f) r59 = fcntl$getown(r55, 0x5) r60 = open$dir(&(0x7f0000001240)='./file0\x00', 0x400000002c4, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r60, 0x0, 0x0) r61 = fcntl$getown(r60, 0x5) r62 = shmget$private(0x0, 0x4000, 0x401, &(0x7f0000ffc000/0x4000)=nil) semctl$IPC_RMID(r62, 0x0, 0x0) shmctl$IPC_SET(r62, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r62, 0x2, &(0x7f0000000040)=""/210) shmat(r62, &(0x7f0000ffc000/0x2000)=nil, 0x2000) r63 = geteuid() shmctl$IPC_SET(r62, 0x1, &(0x7f0000000540)={{0x240000000, r57, r58, r63, r54, 0x61, 0x2}, 0xffffffff00000000, 0x7fff, r56, r59, 0x7fff, 0x5, 0x5}) r64 = getuid() setreuid(r64, 0xffffffffffffffff) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x3, 0x0, r58, r64, 0x0, 0x1c4, 0x80000000}, 0xd, 0x100, r59, r61, 0x0, 0x92, 0xffff}) fchownat(r0, &(0x7f0000000000)='./file0\x00', r15, r58, 0x0) pwritev(r0, &(0x7f0000001640)=[{&(0x7f00000007c0)="8df6a96f63b686e6ea2de2709a7a5506827bf2a26314ec410faada3627e2923eade41ab2e5c4c3d8f538e2daef1058ec3b9e2acf44888191ba326e18834cd56576a10e3d67a63ee64af409acaeac249b3f02da7472f812258f4006320d65ee0fb6fa2ec20da515bedb5a51b517f4225fefad3470abc0257bf02d07a81504d193414cc013bdae0496d602c6779f29361058afa3b9db7ede14ebcef425f856dfe7ac49031dab9bd2b40379e78328d5068cd2033e9bf3d1a7b9fa2fe3cc7f7ab55543b39dc60d6e5576795cb907fa", 0xcd}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) 08:12:35 executing program 1: clock_gettime(0x5, &(0x7f0000000000)) 08:12:35 executing program 0: munlock(&(0x7f0000001000/0x1000)=nil, 0xffffffffdfffefff) r0 = semget$private(0x0, 0x7, 0x100) semctl$GETPID(r0, 0x4, 0x4, &(0x7f0000000000)=""/59) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040)='/d\x00\x00\xed\xfeXb\x06\xee\x9b)\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) pread(r1, &(0x7f0000000080)="54d7d817cfd3748852985eaec54a426cd7d10e154b191bbbee0884b26c0a1fcb1b4ec4c77f3b243759728c0a57fda904e7c28448b3aff69d15100ed21fe437cc1e2d535493a6892542b13c15185633c7f71fa8f943c165e3005ed058a0810b52695bc1052a99ca191e91273d7d82eba8d8b3d29e48310000a314e9f7cb79b4c327cafb5888ac5a04c37b21a314eaa515cfae3bea9e32244463139ee81f3a3817b848", 0xa2, 0x0, 0x0) r4 = getpid() r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x200b0, 0x1) socketpair(0x16, 0x3, 0x5, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xfffffffffffffd2d) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0x66, &(0x7f0000000480)={0x7, 0x1, 0xffffffffffffffeb, 0x9f56, 0xa}, 0x10f) r10 = fcntl$getown(r5, 0x5) r11 = open$dir(&(0x7f0000001240)='./file0\x00', 0x400000002c4, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r11, 0x0, 0x0) r12 = fcntl$getown(r11, 0x5) r13 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r13, 0xffff, 0x1, &(0x7f0000000080), 0x4) close(r13) close(r13) r14 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r14, 0x1, &(0x7f0000000540)={{0x240000000, r8, r9, r8, r9, 0x20, 0x2}, 0xffffffff00000000, 0x7fff, r7, r7, 0x41d, 0x5, 0xd}) r15 = getuid() setreuid(r15, 0xffffffffffffffff) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x3, 0x0, r9, r15, r3, 0x144, 0x4b}, 0xa, 0x100, r10, r12, 0x0, 0x92, 0xffff}) getpgid(r12) r16 = getpgid(0xffffffffffffffff) truncate(&(0x7f0000000200)='./file0\x00', 0x0, 0x5) setpgid(r4, r16) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 08:12:35 executing program 1: readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/241, 0xf1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f00000000c0), 0x832f1f7d, 0x0, &(0x7f0000000000)=@abs, 0x20000000) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) shutdown(r0, 0x0) r1 = socket(0x1, 0x1, 0x8) setsockopt(r1, 0x5, 0x0, &(0x7f0000000240)="fd4050ca226b48e95aff0107b103b6f09a1a393b1d2d0906a0c6617efc18cccc199e33b7c2f7fd8d", 0x28) setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000300)=0x3ff, 0x4) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000840), 0xc) r2 = open(&(0x7f0000000080)='./file0\x00', 0x60e, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000018c0)="ea", 0x1}], 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) kevent(r2, &(0x7f0000000000)=[{{r1}, 0x3, 0x8, 0x2, 0x7fffffff, 0x3}], 0x6, &(0x7f0000000080)=[{}, {{r3}, 0xfffffffffffffffa, 0x50, 0x20000000, 0x3f, 0x7}], 0x0, &(0x7f0000000100)={0x80, 0x7}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x402, 0x0) fcntl$lock(r4, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000ffff00000100000008cd3fdf00000000", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r4, @ANYPTR64], 0x28}, 0x0) r6 = semget$private(0x0, 0x7, 0x8a) semop(r6, &(0x7f00000007c0)=[{0x3, 0x3, 0x1000}, {0x1, 0x5, 0x1000}], 0x2) login: witness: lock order reversal: 1st 0xfffffd807f004018 vmmaplk (&map->lock) 2nd 0xfffffd80663df2b8 inode (&ip->i_lock) lock order "&ip->i_lock"(rrwlock) -> "&map->lock"(rwlock) first seen at: #0 witness_checkorder+0x69c #1 rw_enter+0xd4 #2 vm_map_lock_ln+0x10d #3 uvm_map+0x2da #4 km_alloc+0x18b #5 pool_multi_alloc_ni+0xd0 #6 pool_p_alloc+0x74 #7 pool_do_get+0x10f #8 pool_get+0xeb #9 ufsdirhash_build+0x3ea #10 ufs_lookup+0x2a1 #11 VOP_LOOKUP+0x5b #12 vfs_lookup+0x7a6 #13 namei+0x63c #14 start_init+0xc9 #15 proc_trampoline+0x1c lock order "&map->lock"(rwlock) -> "&ip->i_lock"(rrwlock) first seen at: #0 witness_checkorder+0x69c #1 rw_enter+0xd4 #2 rrw_enter+0x88 #3 VOP_LOCK+0xf9 #4 vn_lock+0x81 #5 uvn_io+0x2c8 #6 uvn_get+0x226 #7 uvm_fault+0x11cc #8 uvm_fault_wire+0x70 #9 uvm_map_pageable_wire+0x2dd #10 sys_mlock+0x185 #11 syscall+0x4a4 #12 Xsyscall+0x128 Stopped at db_enter+0x18: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x18 witness_checkorder(fffffd80663df2b8,9,0) at witness_checkorder+0x1009 rw_enter(fffffd80663df2a8,81) at rw_enter+0xd4 rrw_enter(fffffd80663df2a8,81) at rrw_enter+0x88 VOP_LOCK(fffffd806827b838,81) at VOP_LOCK+0xf9 vn_lock(fffffd806827b838,81) at vn_lock+0x81 uvn_io(fffffd80673f3840,ffff800024fc93a8,1,2,0) at uvn_io+0x2c8 uvn_get(fffffd80673f3840,0,ffff800024fc9600,ffff800024fc9594,0,0) at uvn_get+0x226 uvm_fault(fffffd807f004000,20000000,2,2) at uvm_fault+0x11cc uvm_fault_wire(fffffd807f004000,20000000,20003000,2) at uvm_fault_wire+0x70 uvm_map_pageable_wire(fffffd807f004000,fffffd8066e7cd78,fffffd8066e7c598,ffff800022d9e000,0,0) at uvm_map_pageable_wire+0x2dd sys_mlock(ffff800020aa0ef0,ffff800024fc97f8,ffff800024fc9840) at sys_mlock+0x185 syscall(ffff800024fc98c0) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1926af08fb0, count: -14 ddb{1}> show registers rdi 0x3 rsi 0x3ffff acpi_pdirpa+0x2be67 rbp 0xffff800024fc9020 rbx 0x3 rdx 0x40000 acpi_pdirpa+0x2be68 rcx 0xffff800022d9e000 rax 0xffff800000a00280 r8 0xffffffff81b6af72 witness_checkorder+0xfe2 r9 0x5 r10 0x3 r11 0x232a942046ac9c5f r12 0xfffffd800297b100 r13 0 r14 0xffffffff825f4df0 w_lodata+0x4e080 r15 0xffffffff825fbe00 w_lodata+0x55090 rip 0xffffffff819657f8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800024fc9010 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor.1) pid=82754 stat=onproc flags process=10 proc=4000000 pri=50, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff800020aa0298,0xffff800020aa0798 process=0xffff800020aecab0 user=0xffff800024fc4000, vmspace=0xfffffd807f004000 estcpu=26, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 3175 142477 29828 32767 7 0x10 syz-executor.1 * 3175 82754 29828 32767 7 0x4000010 syz-executor.1 3175 146950 29828 32767 3 0x4000090 fsleep syz-executor.1 60667 313905 0 0 3 0x14200 bored sosplice 4167 256024 99335 32767 3 0x90 nanosleep syz-executor.0 99335 367217 41271 0 3 0x82 wait syz-executor.0 29828 386429 98791 32767 3 0x90 nanosleep syz-executor.1 98791 361776 41271 0 3 0x82 wait syz-executor.1 41271 408099 67909 0 3 0x82 thrsleep syz-fuzzer 41271 425499 67909 0 3 0x4000082 thrsleep syz-fuzzer 41271 343791 67909 0 3 0x4000082 kqread syz-fuzzer 41271 169808 67909 0 3 0x4000082 thrsleep syz-fuzzer 41271 419962 67909 0 3 0x4000082 thrsleep syz-fuzzer 41271 12489 67909 0 3 0x4000082 thrsleep syz-fuzzer 41271 509667 67909 0 3 0x4000082 thrsleep syz-fuzzer 41271 142883 67909 0 3 0x4000082 thrsleep syz-fuzzer 41271 390870 67909 0 3 0x4000082 thrsleep syz-fuzzer 41271 307292 67909 0 3 0x4000082 thrsleep syz-fuzzer 67909 464354 95060 0 3 0x10008a pause ksh 95060 458020 68830 0 3 0x92 select sshd 28098 211142 1 0 3 0x100083 ttyin getty 68830 386542 1 0 3 0x80 select sshd 50263 384365 67471 73 3 0x100090 kqread syslogd 67471 100471 1 0 3 0x100082 netio syslogd 56361 329225 1 77 3 0x100090 poll dhclient 27234 191584 1 0 3 0x80 poll dhclient 65258 474847 0 0 3 0x14200 pgzero zerothread 77721 418165 0 0 3 0x14200 aiodoned aiodoned 34693 100942 0 0 3 0x14200 syncer update 49826 303142 0 0 3 0x14200 cleaner cleaner 30785 444804 0 0 3 0x14200 reaper reaper 7297 445793 0 0 3 0x14200 pgdaemon pagedaemon 53160 388619 0 0 3 0x14200 bored crynlk 57147 301658 0 0 3 0x14200 bored crypto 15640 266155 0 0 3 0x14200 bored viomb 27864 137500 0 0 3 0x40014200 acpi0 acpi0 89277 238824 0 0 3 0x40014200 idle1 55232 426038 0 0 3 0x14200 bored softnet 75569 76162 0 0 3 0x14200 bored systqmp 70070 11830 0 0 3 0x14200 bored systq 92854 410136 0 0 3 0x40014200 bored softclock 94521 118394 0 0 3 0x40014200 idle0 90002 215393 0 0 3 0x14200 bored smr 1 487073 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 3175 (syz-executor.1) thread 0xffff800020aa0ef0 (82754) shared rwlock vmmaplk r = 0 (0xfffffd807f004018) #0 witness_lock+0x52e #1 rw_enter+0x453 #2 vm_map_lock_ln+0x10d #3 uvm_map_pageable+0x11d #4 sys_mlock+0x185 #5 syscall+0x4a4 #6 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82657328) #0 witness_lock+0x52e #1 syscall+0x400 #2 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9474 6340K 6340K 78643K 10568 0 pcb 13 8K 8K 78643K 13 0 rtable 107 3K 3K 78643K 235 0 ifaddr 39 10K 10K 78643K 46 0 counters 39 33K 33K 78643K 39 0 ioctlops 0 0K 2K 78643K 16 0 mount 1 1K 1K 78643K 1 0 vnodes 1214 76K 76K 78643K 1236 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 3 0 VM map 2 1K 1K 78643K 2 0 sem 7 0K 0K 78643K 11 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1810 197K 290K 78643K 12817 0 file desc 7 21K 33K 78643K 64 0 proc 48 50K 83K 78643K 403 0 subproc 34 2K 2K 78643K 51 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 9 0 in_multi 33 2K 2K 78643K 44 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 30 132K 132K 78643K 30 0 exec 0 0K 1K 78643K 196 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 112 22K 22K 78643K 1021 0 UVM aobj 14 2K 2K 78643K 14 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 7 0K 0K 78643K 12 0 temp 67 3020K 3084K 78643K 3372 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 9 0 2 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 21 0 19 1 0 1 1 0 8 0 rtentry 112 56 0 11 2 0 2 2 0 8 0 unpcb 120 45 0 35 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 33 0 33 1 0 1 1 0 8 1 tcpcb 544 15 0 10 1 0 1 1 0 8 0 inpcb 280 63 0 55 2 0 2 2 0 8 1 nd6 48 6 0 2 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 255 0 43 14 0 14 14 0 8 0 art_table 32 256 0 43 2 0 2 2 0 8 0 art_node 16 55 0 14 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 5 0 0 1 0 1 1 0 8 0 shmpl 112 12 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1439 0 37 46 0 46 46 0 8 0 ffsino 272 1439 0 37 94 0 94 94 0 8 0 nchpl 144 1685 0 84 60 0 60 60 0 8 0 uvmvnodes 72 1499 0 0 28 0 28 28 0 8 0 vnodes 208 1499 0 0 79 0 79 79 0 8 0 namei 1024 4222 0 4222 1 0 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 scxspl 192 4491 0 4491 2 1 1 2 0 8 1 plimitpl 152 18 0 9 1 0 1 1 0 8 0 sigapl 432 232 0 217 3 0 3 3 0 8 1 futexpl 56 393 0 392 1 0 1 1 0 8 0 knotepl 112 68 0 49 1 0 1 1 0 8 0 kqueuepl 104 6 0 4 1 0 1 1 0 8 0 pipepl 160 150 0 131 1 0 1 1 0 8 0 fdescpl 488 233 0 217 3 0 3 3 0 8 0 filepl 152 1207 0 1106 5 0 5 5 0 8 0 lockfpl 104 5 0 4 1 0 1 1 0 8 0 lockfspl 48 3 0 2 1 0 1 1 0 8 0 sessionpl 112 18 0 8 1 0 1 1 0 8 0 pgrppl 48 20 0 9 1 0 1 1 0 8 0 ucredpl 96 61 0 52 1 0 1 1 0 8 0 zombiepl 144 217 0 216 1 0 1 1 0 8 0 processpl 904 250 0 216 4 0 4 4 0 8 0 procpl 632 293 0 248 5 0 5 5 0 8 0 srpgc 64 2 0 2 1 0 1 1 0 8 1 sosppl 128 3 0 3 1 0 1 1 0 8 1 sockpl 384 129 0 109 4 0 4 4 0 8 1 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 156 0 0 19 0 19 19 0 8 0 mtagpl 80 1 0 0 1 0 1 1 0 8 0 mbufpl 256 176 0 0 11 0 11 11 0 8 0 bufpl 280 6188 0 1326 348 0 348 348 0 8 0 anonpl 16 36106 0 24182 56 0 56 56 0 125 1 amapchunkpl 152 1233 0 1109 8 0 8 8 0 158 2 amappl16 192 897 0 157 39 0 39 39 0 8 1 amappl15 184 59 0 56 1 0 1 1 0 8 0 amappl14 176 39 0 34 1 0 1 1 0 8 0 amappl12 160 4 0 4 1 1 0 1 0 8 0 amappl11 152 58 0 45 1 0 1 1 0 8 0 amappl10 144 12 0 7 1 0 1 1 0 8 0 amappl9 136 579 0 576 1 0 1 1 0 8 0 amappl8 128 132 0 106 1 0 1 1 0 8 0 amappl7 120 98 0 85 1 0 1 1 0 8 0 amappl6 112 63 0 52 1 0 1 1 0 8 0 amappl5 104 130 0 119 1 0 1 1 0 8 0 amappl4 96 455 0 425 1 0 1 1 0 8 0 amappl3 88 115 0 107 1 0 1 1 0 8 0 amappl2 80 989 0 919 3 0 3 3 0 8 1 amappl1 72 14321 0 13870 24 6 18 20 0 8 8 amappl 80 521 0 479 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 13 0 0 1 0 1 1 0 8 0 uaddrrnd 24 233 0 217 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 233 0 217 1 0 1 1 0 8 0 vmmpekpl 168 5735 0 5707 2 0 2 2 0 8 0 vmmpepl 168 36156 0 34181 119 3 116 116 0 357 24 vmsppl 368 232 0 217 2 0 2 2 0 8 0 pdppl 4096 473 0 434 6 0 6 6 0 8 0 pvpl 32 126897 0 111816 140 0 140 140 0 265 4 pmappl 232 232 0 217 2 0 2 2 0 8 1 extentpl 40 50 0 32 1 0 1 1 0 8 0 phpool 112 162 0 2 5 0 5 5 0 8 0