last executing test programs: 2.404938944s ago: executing program 5 (id=199): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) select(0x40, &(0x7f0000000040)={0x8000000000000000, 0x3, 0x8, 0xfffffffffffff5df, 0x3, 0x7, 0x7fff, 0x7}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x800, 0xb9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) 2.333826224s ago: executing program 5 (id=202): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="cc60d3d79a1a", 0x6}, {&(0x7f00000014c0)="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", 0xffb}], 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000001500), &(0x7f0000000080)=0x4d, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 2.268294414s ago: executing program 5 (id=207): setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62}) r0 = syz_open_pts() ioctl$TIOCSTOP(r0, 0x2000746f) socket(0x18, 0x1, 0x0) select(0x40, &(0x7f0000000180)={0xffffffffdffffff9, 0x44809e9d, 0xfdffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000044}, 0x0, 0x0, 0x0) 2.242775823s ago: executing program 5 (id=213): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.173818603s ago: executing program 5 (id=217): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000001600)=0x4d) readv(r0, &(0x7f0000002bc0)=[{&(0x7f0000001800)=""/74, 0x4a}], 0x1) 1.054900587s ago: executing program 2 (id=223): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)='#!', 0x2}], 0x1) write(r0, &(0x7f0000000080)="09ff07000000000000000000bc37b6c68751000b003c090000000a", 0x1b) execve(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) 1.015108297s ago: executing program 2 (id=230): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x4, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0xa4, 0x19, 0x5, 0x10}, {0x50, 0xb1, 0x4, 0x3}, {0x6, 0x7, 0x4, 0x7ca}]}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) 973.88532ms ago: executing program 6 (id=232): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x40000630, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x2812, r0, 0x0) ftruncate(r0, 0x2) 972.552766ms ago: executing program 2 (id=235): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0) r0 = getppid() ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43260c7caa7, r0) 971.573616ms ago: executing program 4 (id=236): setuid(0xee01) r0 = shmget$private(0x0, 0x2000, 0x604, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x102, 0x6, 0x0, 0x0, 0x4000000009}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0xc61, 0xffffffff, 0xfffffffffffffffe, 0xc, 0x4}) shmctl$IPC_RMID(r0, 0x0) 953.4287ms ago: executing program 6 (id=239): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181f, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r0 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x1) 952.82519ms ago: executing program 4 (id=240): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x6, 0x5, 0x88000001, 0x1, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x20003}, {0xfffffff3, 0xfffffffd, 0x9, 0x1}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x0, 0x2, 0x200}, {0x42, 0x8, 0xfffffffe, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x8, 0xf, 0x14, 0xe}, {0xfffffffd, 0xe2b4, 0x40000003, 0x6}, {0x4, 0x8a, 0x410001, 0x1ff}, {0x1e6, 0x400fff9, 0x927c}, {0x1016, 0x25, 0x5, 0x2d0b}, {0x3, 0x2, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0x40000f8f, 0x8}, {0xfffffffd, 0x8, 0xf778, 0x8}]}) r0 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) 948.867812ms ago: executing program 2 (id=241): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, 0x0, 0x0) 905.383943ms ago: executing program 6 (id=242): r0 = socket(0x18, 0x2, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/51, 0x33}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000100)={&(0x7f0000000200)=@file={0x33, 0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x3d, 0x400}, 0x0) 893.095847ms ago: executing program 4 (id=244): mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x10b) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) 722.647325ms ago: executing program 7 (id=255): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001180)="678314c7", 0x4) 722.452465ms ago: executing program 5 (id=256): select(0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x5, 0x9a8, 0x2175e18d, 0x7, 0x3, 0x2}, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) 720.593142ms ago: executing program 7 (id=259): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x24, 0x0, 0x6, 0x109}, {0x87, 0x3, 0x80, 0x1101}, {0x9b9e, 0x2, 0xf7, 0x106}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000240)=ANY=[]) 641.633262ms ago: executing program 7 (id=262): socket(0x800000018, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x0, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) 636.41826ms ago: executing program 1 (id=265): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r0) 635.433243ms ago: executing program 7 (id=266): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) open(0x0, 0x70e, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) 604.015828ms ago: executing program 1 (id=269): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x200023, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000100)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xd, 0x0, 0x0) 600.206484ms ago: executing program 3 (id=270): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffff9, 0x1, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0xdf5a, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x400000005, 0x3, 0xfffffffffffffffb, 0x0, 0x8000000, 0xa8, 0x100000001, 0xce7], [0xfffffffffffffffe, 0x679, 0xfffffffffffffffa, 0x8000ffffffff, 0x100, 0x1, 0x1fe, 0xb, 0x1, 0x200], [0x100000001, 0xfefffffffffffffe, 0x40000000, 0x8650, 0xffffffffffffffff, 0x4, 0xd], [0x101, 0x20000000000, 0x401, 0xfffffffd, 0xffffffffffefffff, 0x40006], [{0x8, 0x5, 0x0, 0x8}, {0xfffc, 0x7, 0x1}, {0x10, 0x1fff, 0x5bea, 0x814}, {0xf7fe, 0x5, 0x2, 0x10}, {0x9, 0x2, 0x81, 0x808}, {0x400b, 0x40, 0x40000, 0x4}, {0xffff, 0xeaff, 0x4, 0x8}, {0x0, 0x965, 0x400, 0x2}], {0x2000, 0x8, 0xcc, 0xfffffffffffffffe}, {0x0, 0x0, 0x3, 0x2}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) 586.049757ms ago: executing program 1 (id=272): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc0206925, &(0x7f00000001c0)) 582.809619ms ago: executing program 3 (id=273): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) select(0x40, &(0x7f0000000000)={0x1b, 0x80000000004, 0x4, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sendmmsg(r0, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0xe) 577.458721ms ago: executing program 2 (id=275): mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x6d4) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8, 0x80) ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x20000b) pselect(0x40, &(0x7f0000000000)={0x5, 0x2, 0x1, 0x7, 0x3, 0x3ff, 0x917, 0x5}, 0x0, &(0x7f0000000080)={0xfff, 0x5, 0x8, 0x9cb3, 0x5, 0x4, 0x8000000000000201}, 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x2000747a) 575.908381ms ago: executing program 7 (id=276): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x100) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) 531.945426ms ago: executing program 2 (id=278): r0 = syz_open_pts() fcntl$lock(r0, 0x8, &(0x7f0000000840)={0x1, 0x2, 0x5, 0x1000104000000}) flock(r0, 0x3) syz_open_pts() 442.323621ms ago: executing program 7 (id=281): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x2ae77c02, 0x20001fffffffd}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xe8, 0x0) fcntl$lock(r0, 0x8, &(0x7f00000003c0)={0x3, 0x0, 0x6, 0x200000008}) 433.264547ms ago: executing program 1 (id=283): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) 293.006082ms ago: executing program 1 (id=285): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000000000000) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e50000b9", 0x4) 290.443254ms ago: executing program 3 (id=286): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) writev(r1, &(0x7f0000000400)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) 275.939915ms ago: executing program 1 (id=288): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1, 0x0}, 0x40) sendmmsg(r0, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffac}}, 0x38, 0x14) unveil(0x0, &(0x7f0000000100)='c\x00') 272.549835ms ago: executing program 3 (id=289): r0 = socket$inet6(0x18, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000010000000600", 0x7}, 0x1c) setsockopt(r0, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04aee1f", 0x4) 211.751989ms ago: executing program 3 (id=291): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$BIOCIMMEDIATE(r0, 0x8010427e, &(0x7f0000000040)=0x8) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000480)=ANY=[]) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) 179.36309ms ago: executing program 3 (id=293): ioctl$WSKBDIO_SETBACKLIGHT(0xffffffffffffffff, 0x800c5712, &(0x7f0000000000)={0x9, 0x5, 0x2}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r0 = open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) ioctl$FIONREAD(r0, 0x800474c4, &(0x7f0000000080)) write(r0, &(0x7f0000000100)="7b222a506fb39441e2c69e3036", 0xd) 146.00719ms ago: executing program 0 (id=294): open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 132.771236ms ago: executing program 0 (id=295): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)='#!', 0x2}], 0x1) write(r0, &(0x7f0000000140)="892020090900030068cabc3fb6415642000b003c0b0000000a00", 0x1a) execve(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) 112.748832ms ago: executing program 0 (id=296): openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) 95.09363ms ago: executing program 0 (id=297): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x40) execve(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x131, 0xe2f}, 0x3a0, 0xfffffffffffffffb, 0x0, 0x10000, 0x6, 0x40000000000d, 0x5, 0x8000000000000001, 0x0, 0x4}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 31.57382ms ago: executing program 6 (id=298): shmget(0x1, 0x2000, 0x294, &(0x7f0000ffe000/0x2000)=nil) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000003c0)="ea0000a520e9a9dc36859d00", 0xc) 31.301556ms ago: executing program 4 (id=299): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x44946465, 0x0) 22.322556ms ago: executing program 4 (id=300): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8200, 0x0, 0xfffc}}}}}}) 22.09794ms ago: executing program 6 (id=301): r0 = socket$inet(0x2, 0x3, 0x0) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000140), 0x0) 21.197553ms ago: executing program 0 (id=302): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x6, 0x1, './file0\x00'}, 0x19) setuid(0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) 5.529181ms ago: executing program 4 (id=303): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file0\x00', 0x840002ffff) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) write(r0, &(0x7f0000000700)="d9", 0x1) 4.404365ms ago: executing program 6 (id=304): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="61b8159b6174aaa7aaaaaabb86dd60f42e77"]) execve(0x0, 0x0, 0x0) 0s ago: executing program 0 (id=305): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x84, 0x3ff}, 0x400, 0x40000010000, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x6}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe29, 0x0, 0x37) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. pckbd_enable: command error panic: ip6_getpcbopt: unexpected option Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND * 46707 39209 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff834eb32a) at panic+0x1cf ip6_getpcbopt(ffff8000015f3d40,33,ffffef806c0f1d00) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fde8b0,29,33,ffffef806c0f1d00) at ip6_ctloutput+0xfa9 sogetopt(ffff800010fde8b0,29,33,ffffef806c0f1d00) at sogetopt+0x128 sys_getsockopt(ffff80002a75a7e0,ffff8000318afa10,ffff8000318af960) at sys_getsockopt+0x1eb syscall(ffff8000318afa10) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb7ec6c25650, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: ip6_getpcbopt: unexpected option ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834eb32a) at panic+0x1cf ip6_getpcbopt(ffff8000015f3d40,33,ffffef806c0f1d00) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fde8b0,29,33,ffffef806c0f1d00) at ip6_ctloutput+0xfa9 sogetopt(ffff800010fde8b0,29,33,ffffef806c0f1d00) at sogetopt+0x128 sys_getsockopt(ffff80002a75a7e0,ffff8000318afa10,ffff8000318af960) at sys_getsockopt+0x1eb syscall(ffff8000318afa10) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb7ec6c25650, count: -8 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff8000318af690 rbx 0xffffef8075a588f8 rdx 0xffff8000015e1900 rcx 0 rax 0xffff80002a75a7e0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x76630f93e3769309 r11 0x66f6ae1a8ba705c9 r12 0 r13 0xffff800010fde8b0 r14 0 r15 0x1 rip 0xffffffff829fcc95 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000318af680 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=46707 pid=39209 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a75a2b0,0xffffffff83a76958 process=0xffff800035cc9f98 user=0xffff8000318aa000, vmspace=0xffffef806be1fa20 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 39209 297108 6870 0 2 0 syz-executor *39209 46707 6870 0 7 0x4000000 syz-executor 95758 85264 89072 0 2 0 syz-executor 95758 144872 89072 0 3 0x4000080 fsleep syz-executor 88816 238185 71714 0 2 0 syz-executor 88816 290104 71714 0 3 0x4000080 fifor syz-executor 101 174566 49546 0 3 0x80 nanoslp syz-executor 101 123706 49546 0 3 0x4000080 sbwait syz-executor 101 232389 49546 0 3 0x4000080 fsleep syz-executor 79734 111190 13442 0 3 0x80 nanoslp syz-executor 79734 294388 13442 0 3 0x4000080 lockf syz-executor 79734 67839 13442 0 3 0x4000080 fsleep syz-executor 82854 474871 58694 0 3 0x80 nanoslp syz-executor 82854 258254 58694 0 3 0x4000080 lockf syz-executor 82854 208152 58694 0 3 0x4000080 fsleep syz-executor 93366 486066 13539 0 3 0x80 nanoslp syz-executor 93366 150823 13539 0 3 0x4000080 kqsel syz-executor 93366 87026 13539 0 3 0x4000080 fsleep syz-executor 13442 304305 28346 0 3 0x82 nanoslp syz-executor 71714 1738 28346 0 3 0x82 nanoslp syz-executor 13539 236197 28346 0 3 0x82 nanoslp syz-executor 6870 471394 28346 0 3 0x82 nanoslp syz-executor 42267 55584 28346 0 3 0x82 nanoslp syz-executor 58694 449202 28346 0 3 0x82 nanoslp syz-executor 49546 289535 28346 0 3 0x82 nanoslp syz-executor 89072 331729 28346 0 3 0x82 nanoslp syz-executor 28346 121668 83338 0 3 0x82 kqread syz-executor 83338 387908 25400 0 3 0x10008a sigsusp ksh 25400 517442 75372 0 3 0x98 kqread sshd-session 75372 469851 41940 0 3 0x92 kqread sshd-session 95316 80294 1 0 3 0x100083 ttyin getty 41940 524108 1 0 3 0x88 kqread sshd 23637 382402 30244 73 3 0x1100090 kqread syslogd 30244 430133 1 0 3 0x100082 sbwait syslogd 93382 515241 1 0 3 0x100080 kqread resolvd 6871 40527 61824 77 3 0x100092 kqread dhcpleased 56150 343368 61824 77 3 0x100092 kqread dhcpleased 61824 36451 1 0 3 0x80 kqread dhcpleased 42249 406487 0 0 3 0x14200 bored smr 83298 123609 0 0 2 0x14200 zerothread 97186 335473 0 0 3 0x14200 aiodoned aiodoned 31990 436147 0 0 3 0x14200 syncer update 71267 50173 0 0 3 0x14200 cleaner cleaner 64604 174979 0 0 3 0x14200 reaper reaper 37488 205607 0 0 3 0x14200 pgdaemon pagedaemon 74599 432853 0 0 3 0x14200 bored viomb 84118 288773 0 0 3 0x40014200 acpi0 acpi0 29440 156243 0 0 3 0x14200 bored softnet0 33865 414959 0 0 3 0x14200 bored systqmp 79839 433976 0 0 3 0x14200 bored systq 98945 502746 0 0 3 0x40014200 tmoslp softclock 73295 135631 0 0 3 0x40014200 idle0 1 154119 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11047 12240K 12336K 166960K 12288 0 pcb 17 12K 12K 166960K 49 0 rtable 224 7K 7K 166960K 397 0 pf 38 14K 20K 166960K 74 0 ifaddr 40 6K 7K 166960K 57 0 ifgroup 59 2K 2K 166960K 87 0 sysctl 1 1K 9K 166960K 5 0 counters 35 18K 18K 166960K 43 0 ioctlops 0 0K 4K 166960K 54 0 iov 0 0K 16K 166960K 9 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1292 81K 82K 166960K 1477 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 2 2K 2K 166960K 4 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 437 0 proc 61 67K 100K 166960K 508 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 24 0 in_multi 84 6K 7K 166960K 110 0 ether_multi 1 0K 0K 166960K 1 0 mrt 1 0K 0K 166960K 11 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 387 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 227 150K 158K 166960K 5373 0 UVM aobj 5 2K 2K 166960K 6 0 pinsyscall 39 78K 94K 166960K 1547 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 6 0 NDP 13 0K 2K 166960K 38 0 temp 37 9106K 9154K 166960K 13058 0 kqueue 13 20K 26K 166960K 57 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 44 0 41 1 0 1 1 0 8 0 rtentry 136 116 0 20 4 0 4 4 0 8 0 unpcb 144 87 0 68 1 0 1 1 0 8 0 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 48 0 43 1 0 1 1 0 8 0 arp 96 18 0 2 1 0 1 1 0 8 0 inpcb 328 168 0 160 2 0 2 2 0 8 1 ip6q 72 1 0 0 1 0 1 1 0 8 0 ip6af 40 1 0 0 1 0 1 1 0 8 0 nd6 112 25 0 6 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 4 0 4 1 0 1 1 0 8 1 pfstscr 40 8 0 2 1 0 1 1 0 8 0 pfrktable 1344 2 0 1 1 0 1 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pfstitem 24 5 0 0 1 0 1 1 0 8 0 pfstkey 128 7 0 2 1 0 1 1 0 8 0 pfstate 384 4 0 1 1 0 1 1 0 8 0 pfrule 1360 2 0 1 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 494 0 84 29 0 29 29 0 8 2 art_table 40 495 0 84 5 0 5 5 0 8 0 art_node 32 115 0 27 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 3 1 0 1 1 0 8 0 shmpl 112 3 0 1 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2023 0 566 92 0 92 92 0 8 0 ffsino 256 2023 0 566 92 0 92 92 0 8 0 nchpl 144 2556 0 863 63 0 63 63 0 8 0 vnodes 216 2156 0 0 120 0 120 120 0 8 0 namei 1024 7029 0 7029 1 0 1 1 0 8 1 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 kstatmem 264 43 0 16 2 0 2 2 0 8 0 scxspl 216 8563 0 8563 4 0 4 4 1 8 4 plimitpl 152 38 0 22 1 0 1 1 0 8 0 sigapl 424 735 0 692 6 0 6 6 0 8 1 knotepl 120 12921 0 12874 10 0 10 10 0 8 8 kqueuepl 184 51 0 41 1 0 1 1 0 8 0 pipepl 304 126 0 99 3 0 3 3 0 8 0 fdescpl 448 722 0 692 5 0 5 5 0 8 1 filepl 120 2185 0 1970 7 0 7 7 0 8 0 lockfpl 104 81 0 75 1 0 1 1 0 8 0 lockfspl 48 34 0 30 1 0 1 1 0 8 0 sessionpl 144 28 0 20 1 0 1 1 0 8 0 pgrppl 48 36 0 20 1 0 1 1 0 8 0 ucredpl 104 221 0 210 1 0 1 1 0 8 0 zombiepl 144 693 0 692 1 0 1 1 0 8 0 processpl 1152 735 0 692 4 0 4 4 0 8 0 procpl 664 1079 0 1025 5 0 5 5 0 8 0 sockpl 552 304 0 274 3 0 3 3 0 8 0 mcl64k 65536 88 0 87 1 0 1 1 0 8 0 mcl16k 16384 87 0 87 1 0 1 1 0 8 1 mcl12k 12288 47 0 47 1 0 1 1 0 8 1 mcl9k128 9344 21 0 21 1 0 1 1 0 8 1 mcl8k 8192 77 0 77 1 0 1 1 0 8 1 mcl4k 4096 3048 0 2992 13 0 13 13 0 8 5 mcl2k 2048 191 0 191 1 0 1 1 0 8 1 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 7817 0 7634 19 0 19 19 0 8 4 bufpl 272 2951 0 105 190 0 190 190 0 8 0 anonpl 24 113051 0 109830 33 0 33 33 0 88 11 amapchunkpl 152 16444 0 15950 26 0 26 26 0 158 5 amappl16 200 1845 0 1819 5 0 5 5 0 8 3 amappl15 192 8 0 8 1 0 1 1 0 8 1 amappl14 184 439 0 438 1 0 1 1 0 8 0 amappl13 176 120 0 110 1 0 1 1 0 8 0 amappl12 168 957 0 928 2 0 2 2 0 8 0 amappl11 160 2 0 2 1 0 1 1 0 8 1 amappl10 152 59 0 49 1 0 1 1 0 8 0 amappl9 144 271 0 271 1 0 1 1 0 8 1 amappl8 136 95 0 94 1 0 1 1 0 8 0 amappl7 128 144 0 133 1 0 1 1 0 8 0 amappl6 120 149 0 148 1 0 1 1 0 8 0 amappl5 112 93 0 86 1 0 1 1 0 8 0 amappl4 104 266 0 250 1 0 1 1 0 8 0 amappl3 96 3314 0 3199 3 0 3 3 0 8 0 amappl2 88 530 0 477 2 0 2 2 0 8 0 amappl1 80 11369 0 10824 13 0 13 13 0 8 1 amappl 88 4662 0 4496 4 0 4 4 0 92 0 uvmvnodes 80 109 0 0 3 0 3 3 0 8 0 dma32768 32768 2 0 2 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 1 1 0 1 1 0 8 0 uaddrrnd 24 722 0 692 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 722 0 692 1 0 1 1 0 8 0 vmmpekpl 168 7073 0 7044 2 0 2 2 0 8 0 vmmpepl 168 52703 0 50894 80 0 80 80 0 357 0 vmsppl 368 721 0 692 4 0 4 4 0 8 1 rwobjpl 40 16814 0 15864 11 0 11 11 0 8 1 pdppl 4096 1450 0 1384 96 30 66 80 0 8 0 pvpl 32 323569 0 314242 84 0 84 84 0 265 8 pmappl 216 721 0 692 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 556 0 30 16 0 16 16 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834eb32a) at panic+0x1cf ip6_getpcbopt(ffff8000015f3d40,33,ffffef806c0f1d00) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fde8b0,29,33,ffffef806c0f1d00) at ip6_ctloutput+0xfa9 sogetopt(ffff800010fde8b0,29,33,ffffef806c0f1d00) at sogetopt+0x128 sys_getsockopt(ffff80002a75a7e0,ffff8000318afa10,ffff8000318af960) at sys_getsockopt+0x1eb syscall(ffff8000318afa10) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb7ec6c25650, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834eb32a) at panic+0x1cf ip6_getpcbopt(ffff8000015f3d40,33,ffffef806c0f1d00) at ip6_getpcbopt+0x3e3 ip6_ctloutput(0,ffff800010fde8b0,29,33,ffffef806c0f1d00) at ip6_ctloutput+0xfa9 sogetopt(ffff800010fde8b0,29,33,ffffef806c0f1d00) at sogetopt+0x128 sys_getsockopt(ffff80002a75a7e0,ffff8000318afa10,ffff8000318af960) at sys_getsockopt+0x1eb syscall(ffff8000318afa10) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb7ec6c25650, count: -8