last executing test programs: 165.104308ms ago: executing program 3 (id=4): syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @random="74959453a2ab", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x8000, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0xff, 0x7ff}, @generic={0x3, 0x6, "5644b6cd"}]}}}}}}}) kill(0xffffffffffffffff, 0x0) openat$klog(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000180)="090004bf", 0x4) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_GETDEFAULTBELL(r2, 0x40105706, &(0x7f0000000040)) ppoll(&(0x7f0000000040)=[{r0, 0xa}, {r2, 0x4}, {r0, 0x10}], 0x3, &(0x7f0000000080)={0x9}, &(0x7f0000000100)={0x5ec3}) mquery(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x0, 0xffffffffffffffff, 0x97) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x1) futimens(r0, &(0x7f0000000000)=[{0x9, 0x2}, {0x4, 0x3}]) 17.696036ms ago: executing program 3 (id=9): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000300)={0x10, 0x4, [{&(0x7f0000605000/0x1000)=nil, &(0x7f0000757000/0x4000)=nil, 0xe4}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000175000/0x1000)=nil, 0x1}, {&(0x7f0000186000/0x2000)=nil, &(0x7f0000ff1000/0xc000)=nil, 0x5}, {&(0x7f000010d000/0x2000)=nil, &(0x7f000074e000/0x1000)=nil, 0x64}, {&(0x7f00003d0000/0x2000)=nil, &(0x7f0000481000/0x1000)=nil, 0x100000001}, {&(0x7f000052d000/0x3000)=nil, &(0x7f00000db000/0x2000)=nil, 0x2}, {&(0x7f0000ff1000/0xc000)=nil, &(0x7f00006d7000/0x2000)=nil, 0x3}, {&(0x7f0000052000/0x3000)=nil, &(0x7f0000542000/0x3000)=nil, 0x5}, {&(0x7f00002e4000/0xc00000)=nil, &(0x7f0000c43000/0x2000)=nil, 0x7}, {&(0x7f0000dd3000/0x2000)=nil, &(0x7f00006cd000/0x2000)=nil, 0x6}, {&(0x7f0000112000/0x1000)=nil, &(0x7f0000eda000/0x2000)=nil, 0xdf}, {&(0x7f00000d8000/0x2000)=nil, &(0x7f00007f9000/0x4000)=nil, 0x7fffffffffffffff}, {&(0x7f00006ce000/0x2000)=nil, &(0x7f0000105000/0x4000)=nil, 0x2}, {&(0x7f0000498000/0x2000)=nil, &(0x7f00007cf000/0x2000)=nil, 0x598}, {&(0x7f0000b67000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x6}, {&(0x7f0000515000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000001}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x8, 0x2, 0xfffffff7, 0x9, [0x5, 0x10001, 0xd90, 0x9, 0x2, 0x8e, 0x9, 0x7, 0x1, 0x8bbf, 0x9, 0x20, 0x80000000, 0x5, 0x8, 0x2, 0xffffffff, 0xadf8, 0x699, 0x7a6d, 0xd46e, 0x10, 0x3, 0x0, 0x1ff, 0x9, 0x5, 0x2, 0xfffffffe, 0x1a70, 0x7, 0x9, 0x7, 0x8001, 0x8, 0x2, 0x400, 0xfffffff7, 0xcb0d, 0x0, 0xffffffff, 0x5, 0x4, 0xffffd036, 0x4, 0x9, 0x5, 0x8, 0x800, 0xa12, 0x2, 0x2, 0x4, 0x48, 0x2, 0x10000, 0x3, 0xcfd8c1a, 0x2, 0x2, 0x286, 0x56cfebf8, 0xf7c3, 0xdc2f, 0x2, 0x6, 0x2, 0x4, 0x3, 0x7, 0x3, 0x2, 0x9, 0x6, 0x5, 0x40, 0xef3b, 0x2, 0x0, 0xff, 0x7, 0x4, 0x2, 0x2, 0x10, 0x4, 0xe5, 0xfffffff2, 0xb, 0x5, 0x7fff, 0x7fff, 0x10, 0x6, 0x40, 0x6, 0xffffffff, 0x7, 0x2, 0xffff, 0xffff, 0x14df, 0xe353, 0x7a2, 0xffffffff, 0x7ff, 0x4, 0x154b, 0x3, 0x1, 0x0, 0x2, 0x7, 0x9, 0x8, 0xffffffff, 0x3, 0x80000000, 0x4, 0xc5, 0xc, 0x0, 0x80, 0x8, 0x6, 0x7, 0x706b, 0x9, 0xf0, 0x2, 0xfffffffe, 0x0, 0x3, 0x4, 0x0, 0x401, 0xfffffff9, 0x51, 0x6, 0x6, 0x81ae, 0x1ff, 0x6, 0xb, 0x8000, 0xb, 0x1ff, 0x1, 0xffff, 0x10001, 0x800, 0x80000000, 0x82c2, 0x1, 0x2, 0x2, 0x3, 0x81ff, 0x7, 0x1, 0x9, 0xfffffffa, 0x3, 0x3e, 0xd, 0xa2e1, 0xc, 0x0, 0x7, 0x81, 0xe, 0x8, 0xb821, 0x9, 0x8, 0x9, 0x4, 0x0, 0x3, 0x7, 0x6, 0x3, 0xfff, 0x0, 0x81, 0x7, 0x80000000, 0x4, 0x6, 0x6fba, 0x6, 0x48, 0x4, 0x1798, 0x6, 0x2, 0x3, 0xfffffffe, 0x7, 0x5, 0x0, 0x0, 0x8001, 0x100, 0x57d67d82, 0x80, 0x2, 0x2, 0x80000000, 0x34b, 0x5, 0x800, 0xe94f, 0x800, 0x0, 0x5ebe, 0xfffffffb, 0x101, 0x9, 0x9, 0x9, 0x4, 0x10001, 0x5, 0xfffffff7, 0x10000, 0x87a, 0x0, 0x3, 0x0, 0x7, 0x8, 0xfffffffa, 0x6, 0x6, 0x4b3, 0xd3b, 0x6, 0x4, 0x1, 0x1, 0x3b2, 0x7fff, 0x78b03661, 0x7fffffff, 0x9, 0x7f, 0x4, 0x2, 0xffff, 0x3ff, 0xff, 0x4, 0x6, 0x4, 0x1, 0xc3, 0xb, 0x8, 0xfffffff8, 0x0, 0xcd4, 0x8, 0x200, 0xa4a, 0x49f, 0xffffd73e, 0x2, 0x6, 0xb, 0x9e, 0x3, 0x9, 0x9, 0x0, 0xe, 0xfff, 0x1, 0x0, 0x590, 0x6e60, 0x982, 0xa, 0x40, 0x9, 0x0, 0xc, 0x20, 0x5c2, 0x4, 0x8, 0x0, 0x400, 0x3, 0x141a, 0x6, 0xab4, 0xfffffff7, 0x253, 0x6a8, 0x1, 0x7, 0x80000000, 0x7, 0x3a9, 0x7fffffff, 0xd79, 0x6, 0x2, 0x1f320b99, 0x0, 0xfffffffd, 0xb27f, 0x2, 0x26, 0x7, 0x27c, 0x1, 0x6, 0x401, 0x8df, 0x3, 0x0, 0x74, 0xc8, 0x0, 0x8, 0x4, 0x7, 0x7, 0x9, 0x7, 0x5, 0x3, 0x3, 0x5, 0x7, 0x100, 0x7, 0x6, 0x1, 0x0, 0xb, 0x943, 0x0, 0x7, 0x1, 0x80, 0x9, 0xce39, 0x2, 0xf4, 0x3, 0x6, 0x76d5, 0x8, 0x8, 0x0, 0x9, 0x28, 0x0, 0x7208, 0x0, 0x5, 0x1, 0x8, 0x21d944e4, 0x9, 0x5, 0x8, 0x1, 0x7, 0x1ff, 0x8, 0x4e6, 0x3, 0x9, 0x6, 0x8, 0x7f, 0x5, 0x1, 0x10000, 0x0, 0x8, 0x1, 0x3, 0x2, 0x800, 0x6, 0x4, 0x8000, 0x0, 0xffffff00, 0x34a, 0x6, 0x9e2, 0x8, 0x6d, 0xe, 0x3, 0xfffffffc, 0x401, 0x6, 0x6, 0x5, 0x0, 0x3, 0x1, 0xffffffff, 0xc, 0x1, 0x400, 0x8000, 0x9, 0x7ad, 0x6, 0x81, 0x1, 0x7c0, 0x100, 0x8, 0xa557, 0x9, 0x6, 0x2, 0x4, 0x1, 0x800, 0x6, 0x2, 0x0, 0x5, 0x7, 0x0, 0x4, 0x4, 0x200, 0x3ff, 0x3, 0x8, 0x9, 0xfff, 0x6, 0x7f, 0x8, 0x6, 0x8, 0x5, 0x3, 0x754b, 0xcbb2, 0x5, 0x7ff, 0x1140, 0x5, 0x5, 0xf, 0x8001, 0x6, 0x998f, 0x200, 0x81, 0x38000000, 0x8, 0x5, 0xaad, 0x2, 0x3, 0x3, 0xd9c, 0x5, 0x28, 0x4, 0x2, 0x535967ef, 0x1, 0x80, 0x1, 0xffffffff, 0x7, 0x4, 0xf, 0x9, 0x3e99, 0xfff, 0x1, 0x6557, 0x6, 0xb, 0x5, 0xb, 0x8, 0xffff, 0x7f, 0x9, 0x0, 0x8, 0x0, 0x8, 0x0, 0x7b31, 0xa7, 0x0, 0x9, 0xfff, 0x6, 0x7fffffff, 0x5, 0x8000, 0x9, 0x40000]}) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x6, 0xffffffffffffffff) ioctl$KDGKBMODE(r0, 0x40044b06, &(0x7f00000000c0)) (async, rerun: 64) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (rerun: 64) r1 = syz_open_pts() close(r1) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4000000000000054}) (rerun: 32) r2 = syz_open_pts() close(r2) (async) syz_open_pts() (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x766a, 0xc9d, 0xd01, 0x9, "9cdcfe02307e08000000395000008166dd040008", 0x10005, 0x9}) (async) write(r2, &(0x7f0000004b40)="2b6e75e97fd2b8a49a26278ee96a45b5951bcc4d79b2e8e483363749d72e59a5c386a1c9ed9fffc4268e808a", 0x2c) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0x920b, 0x6, 0xfffffff2, 0xffffff90, "08955c1cfac164e20a070e00000009ffe600", 0x4000000, 0x3}) (async) stat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(0x0, r4, r5) (async) setgroups(0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) chmod(&(0x7f0000000040)='./file0\x00', 0x29b) (async, rerun: 32) setuid(0xee01) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) (async, rerun: 64) chown(&(0x7f0000000000)='\x00', 0x0, r3) (rerun: 64) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 15.985418ms ago: executing program 0 (id=1): readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)=""/251, 0xfb}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffd}, 0x38, 0x1042, 0x0) closefrom(r1) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1, 0x7}, {0x3, 0xff03}, {0x1, 0x1}, {0x1, 0x800}, {0x3}, {0x5}, {0x0, 0xaa59}, {0x3, 0xb59}, {0x1, 0x1}, {0x3, 0x100}, {0x1, 0x1}, {0x3, 0x80000000}, {0x2, 0x5}, {}, {0x1, 0x5}, {0x1, 0xffffffff}, {0x3, 0x1}, {0x3, 0xffffff01}, {0x3, 0xfffffffe}, {0x1, 0x7ff}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0xf208}, {0x2, 0x41000000}, {0x1, 0x1}, {0x0, 0x1ff}, {0x0, 0x202}, {0x3, 0xffffffff}, {0x3, 0x9}, {0x1, 0x5}, {0x3}]}) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x30, 0x1, './file0\x00'}, 0xa) sendmsg$unix(r2, &(0x7f00000029c0)={&(0x7f0000000080)=@file={0x80, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000002980)=[@rights={0x10, 0xffff, 0x1, [0xffffffffffffffff]}], 0x10, 0x1}, 0x0) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105727, &(0x7f0000000000)={&(0x7f00000000c0)=[{0x23, 0x8000}], 0x1}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) r4 = socket$inet(0x2, 0x3, 0x2) bind$inet(r4, &(0x7f0000000080)={0x10, 0x2, 0x1, 0x200000e}, 0x10) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r5, 0x8010570e, &(0x7f0000000000)={0x0, 0x0}) ioctl$WSKBDIO_GETBACKLIGHT(r5, 0x400c5711, &(0x7f0000000080)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIOASYNC(r6, 0x8004667d, &(0x7f0000000040)=0x9) readv(r6, &(0x7f0000004740)=[{0x0}], 0x1) ioctl$TIOCSETVERAUTH(r6, 0x8004741c, &(0x7f0000000000)=0x794) r7 = socket(0x18, 0x3, 0x7) getsockopt(r7, 0x29, 0x3c, 0x0, 0x0) close(r0) 11.55414ms ago: executing program 3 (id=10): getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(0x0, r4) chown(&(0x7f0000000040)='./file0\x00', r0, r4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{r0, r1, 0x0, 0x0, 0x0, 0x85, 0x48e}, 0x6, 0x9, 0xfffffffffffffffc, 0x0, 0x1, 0xb000000000004000, 0xfffffffffffffff9, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) ktrace(0x0, 0x0, 0x1d0e, 0x0) poll(0x0, 0x47, 0x6) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x7, 0xa}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r6 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r6, 0x80206980, &(0x7f00000001c0)) clock_gettime(0x3, &(0x7f0000000080)) getgroups(0xa, &(0x7f0000000240)=[r4, r4, r1, r4, r4, r4, r4, r4, r1, r1]) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000180)="ed2f6251", &(0x7f0000000200)=0x4, &(0x7f0000000240), 0x0) chown(&(0x7f0000000200)='./file0\x00', r0, r7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) r8 = socket(0x2, 0x2, 0x0) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x1) futimens(r9, &(0x7f0000000000)=[{0x9, 0x2}, {0x4, 0xffffffffffffffff}]) r10 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) kevent(r9, &(0x7f0000000280)=[{{r2}, 0xfffffffffffffff8, 0x10, 0x1, 0x6}], 0xf2ea, &(0x7f0000000300)=[{{r2}, 0xfffffffffffffff6, 0x2, 0x2, 0x9, 0x2}, {{r3}, 0xfffffffffffffffe, 0x10, 0x40, 0x4, 0x8c7b}, {{r10}, 0xfffffffffffffffc, 0x0, 0x80, 0x6, 0x7f}], 0x7fffffff, &(0x7f0000000380)={0x3, 0x400}) connect$inet(r8, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1a}, 0x4, 0x0, 0x0, &(0x7f00000001c0)='HM', 0x2) sendmmsg(r8, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x404) 8.324032ms ago: executing program 7 (id=8): r0 = open(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='.\x00') mkfifo(&(0x7f00000000c0)='./file0/file0\x00', 0x8) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) setgroups(0x1, &(0x7f0000001180)=[0x0]) r1 = socket$inet(0x18, 0x3, 0x102) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000000)="6388020000003a9a8c51d8f3efa24a85abdd612dd68e59adfecf9323100084410a8591426ee03ecad2a8521d4d5378b13a93eb347a357c83eaaabdbc602eb006f76374420a2369d686e734f79ec705c63cb3f2162594af55fb9363d00dc380a85588dd3fe306944761828765f18c422ef5", 0x71}, {&(0x7f00000002c0)="646862e6d4320e223881f697942bb5565d0ef640c93106c43353189e88e80ad1db4f41b0b5eacd322e17898cfb75ae3694a6ae455f3de8975161cb7e96e9750261e907f34e58edf6fa445f23264a0cce84e7b9f0e83929f92b46b9c52a61a3df667fd66a", 0x64}], 0x2, 0x0}, 0x400) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000040)=0x80) unveil(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='w\x00') 6.964915ms ago: executing program 1 (id=2): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10ac0, 0x99) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)='#', 0x1}], 0x1) mmap(&(0x7f00003d6000/0x1000)=nil, 0x1000, 0x3, 0x2810, r1, 0x800000000000000) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000eacf00103afffe8000000000000000000000000000aaff02000000000000000000000000000188"]) setsid() ioctl$WSKBDIO_SETMODE(r3, 0x80045713, &(0x7f0000000080)) ioctl$DIOCNATLOOK(r0, 0xc0504417, &(0x7f0000000080)={@v6=@loopback, @v4=@remote={0xac, 0x14, 0x0}, @v4, @v6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x2, 0x7, 0x1, 0x9, 0x5, 0x18, 0x6, 0x3}) socket(0x1, 0x1000, 0x5) 4.502172ms ago: executing program 6 (id=7): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x10c) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCPROMISC(r1, 0x20004269) r4 = socket(0x2, 0x8002, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) closefrom(r5) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000080)="0601fd16a76221050c031422defe1db52fc76694062642072a4a203a726c4fc6b11eefb5f779eb1d5c6db8dd18b4fb365058b1fc076375579ccdb916dc393feea233e4870810ee32c12409b6fab56f7e34c555ccf7d48289eda22ecba1a9c005899cd6c8ae828072ac9a295ff9c34bc3c4a9a753e20008aaa1407017760a945185a70b9123362997c6ebe124c0e54c3a954e6a1f088867a25b1ed0090acc79cf56afb4a75191a0", 0xa7}, {&(0x7f0000000140)="b4ebe585b69915e34d7150bd9966217d52a1797ada1399287a1ac83c89ef558e52ba9ec6da56742659cd70136e2fd0b9223fa9c29ab8c9d3be53d8f598d4ec45c3deaf3a47c014f25585316ba928813a642a91d94c78dd1241f5886da2b05bc42414e7f49c079e1cab88b63225057fd823de003baa53cac61770190f5124231ce93ab8", 0x83}, {&(0x7f0000000200)="0b7768cf835ae765d059df2f5f6d32069b53e4dac6f23fffa4a439db8cc8b77cadfab41796e8c76daf7904179055ed90a05163fb1575b077439c86e8d784e84e68e38c22df4beb77fed52aa469c246fbb3652db36557e7c58906bf4de827fd954351e7b78d335726b8290119881b2ba463c2fde0abfc3dd9b8ee23a7f2b484ad9bf771cdd630e2a9ba78361eaa5f33a38e4bb6ffac5cec66baf7323f85f57467", 0xa0}, {&(0x7f00000002c0)="e9a9c07720fa55804d742ea38e1ae2b3a70507c274cba4c855c7ccb8c69520c16550088681bd9a6e7137cd11f5b9207c8b0e83c5329201d0c3114c704a979568d84b091c22789883dc08", 0x4a}, {&(0x7f0000000340)="2bbfdfcbf4e0b71da8a5e293e5adc413cb7293289126564f7ac5360984a20618b58309af9f13633e36ac04019527e81a950e6d34f1f25b1e98e5dd15119aed24936a106e9e6e192bdcdc447d69de8d1221a523c1d43353d3fe3ba06e77c04701d67a231367606304bd09e4cdec7b16eab5e114727c91d65ac017de2ec81833dbad25e19e9a9188b796f58032374486cd4d2a097b61ae28318e8a4c5b1d77e37a715a42a27ec4f9e3530687868e5461a0eccc03dcc48b83c42c0005b4965ab76a6c40cb0bcef6fa0c6e647589d6dcd1feacebecbe747fd71923804b1ae767", 0xfffffffffffffe7c}, {&(0x7f0000000440)="490ca6eb06a29b02cb8ac96c867b64730bc1f606e8975e5a0d1c98009b3cc6d8e94f069f265f9149d165f3f0770208974dfe888e8e9880f066f9ba887d81b0588e504263d9e66a41d04b", 0x4a}, {&(0x7f00000004c0)="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", 0x1000}], 0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r6, 0x3}) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2, 0x2, 0x9, 0x300000006}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) close(r6) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @random="00000c000001", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x1c, 0xfffa, 0x0, 0x7, 0x1, 0x0, @multicast1, @multicast1}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x1, 0xff}}}}}) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) r7 = socket$inet(0x2, 0x3, 0x2) bind$inet(r7, &(0x7f0000000000)={0x10, 0x2, 0x3, 0x2000008}, 0x10) 4.122552ms ago: executing program 5 (id=6): r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x4) ioctl$AUDIO_GETPOS(r0, 0x40104123, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0xa, "fe0100e88400000002ec00020100", 0x6ae}, 0x1c) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x10) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000180)="fd4a867cea73ca7308eb6849da98ac609a61b5c657a59f400dc2de7e2a7bfb5b6e7864ab3d4c3c05af086d83e0124c993735894be7ecfe2977026bc04ecd5000fe8bde9805c7", 0x46) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809fffffffffffeff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) 383.515µs ago: executing program 1 (id=11): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x300000003}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) sysctl$hw(&(0x7f0000000080)={0x6, 0xc}, 0x2, &(0x7f0000000000)="00ecc9dd", &(0x7f0000000240)=0x4, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x95) bind$inet(r1, &(0x7f0000000000), 0x10) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=12): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. dev = 0x400, ino = 286, fs = / panic: ffs_freefile: freeing free inode Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *141949 52018 0 0x2 0 0 syz-executor 284904 11697 0 0x14000 0x200 1 zerothread db_enter() at db_enter+0x25 panic(ffffffff834278dd) at panic+0x1e5 ffs_freefile(fffffd806c641ce0,665e,2000) at ffs_freefile+0x45f ffs_inode_free(fffffd806c641ce0,665e,2000) at ffs_inode_free+0x44 ufs_inactive(ffff80002a336ab0) at ufs_inactive+0x29c VOP_INACTIVE(fffffd8066750440,ffff80002a231ca0) at VOP_INACTIVE+0x104 vput(fffffd8066750440) at vput+0xe5 VOP_REMOVE(fffffd8066750008,fffffd8066750440,ffff80002a336c18) at VOP_REMOVE+0x199 dounlinkat(ffff80002a231ca0,ffffff9c,75edd15662c0,0) at dounlinkat+0x1c4 syscall(ffff80002a336d90) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75edd1566770, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: ffs_freefile: freeing free inode ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff834278dd) at panic+0x1e5 ffs_freefile(fffffd806c641ce0,665e,2000) at ffs_freefile+0x45f ffs_inode_free(fffffd806c641ce0,665e,2000) at ffs_inode_free+0x44 ufs_inactive(ffff80002a336ab0) at ufs_inactive+0x29c VOP_INACTIVE(fffffd8066750440,ffff80002a231ca0) at VOP_INACTIVE+0x104 vput(fffffd8066750440) at vput+0xe5 VOP_REMOVE(fffffd8066750008,fffffd8066750440,ffff80002a336c18) at VOP_REMOVE+0x199 dounlinkat(ffff80002a231ca0,ffffff9c,75edd15662c0,0) at dounlinkat+0x1c4 syscall(ffff80002a336d90) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75edd1566770, count: -11 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a3368b0 rbx 0xffffffff8390fe07 cpu_info_full_primary+0x2e07 rdx 0 rcx 0xffff80002a231ca0 rax 0xffffffff8390eff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x10c1c55941074527 r11 0xf78fd269b2df2f62 r12 0xffffffff8390fc08 cpu_info_full_primary+0x2c08 r13 0 r14 0 r15 0x1 rip 0xffffffff8299c4b5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a3368a0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=141949 pid=52018 tcnt=1 stat=onproc flags process=2 proc=0 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffffd760,0xffff80002a2314e8 process=0xffff8000ffff5ce8 user=0xffff80002a331000, vmspace=0xfffffd800b0633d0 estcpu=36, cpticks=5, pctcpu=0.4, user=0, sys=5, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 66767 23958 19881 0 2 0xc90 syz-executor 66767 25056 19881 0 3 0x4000090 rest syz-executor 66767 130875 19881 0 3 0x4000090 fsleep syz-executor 62784 448024 35403 0 2 0 syz-executor 62784 44129 35403 0 3 0x4000000 biowait syz-executor 35403 288073 48065 0 2 0xc82 syz-executor *52018 141949 48065 0 7 0x2 syz-executor 19881 368784 48065 0 2 0xc82 syz-executor 48065 61487 13140 0 3 0x82 wait syz-executor 13140 179262 10767 0 3 0x10008a sigsusp ksh 10767 178724 31463 0 3 0x98 kqread sshd-session 31463 8193 60435 0 3 0x92 kqread sshd-session 93435 375326 1 0 3 0x100083 ttyin getty 60435 358151 1 0 3 0x88 kqread sshd 21837 46536 40278 74 2 0x1100092 pflogd 40278 341255 1 0 3 0x80 sbwait pflogd 68068 313146 10841 73 3 0x1100090 kqread syslogd 10841 474827 1 0 3 0x100082 sbwait syslogd 41641 1199 1 0 3 0x100080 kqread resolvd 18654 270390 27254 77 3 0x100092 kqread dhcpleased 75709 290172 27254 77 3 0x100092 kqread dhcpleased 27254 20716 1 0 3 0x80 kqread dhcpleased 75150 98310 0 0 3 0x14200 bored smr 11697 284904 0 0 7 0x14200 zerothread 61304 335359 0 0 3 0x14200 aiodoned aiodoned 15323 433308 0 0 2 0x14e00 update 58792 274711 0 0 3 0x14200 cleaner cleaner 583 307466 0 0 3 0x14200 reaper reaper 9453 175122 0 0 3 0x14200 pgdaemon pagedaemon 71301 177931 0 0 3 0x14200 bored viomb 39663 498904 0 0 3 0x40014200 acpi0 acpi0 82686 127981 0 0 3 0x40014200 idle1 50521 337533 0 0 3 0x14200 bored softnet1 84676 152992 0 0 2 0x14200 softnet0 47335 57076 0 0 2 0x14200 systqmp 51637 176346 0 0 3 0x14200 bored systq 32969 279601 0 0 3 0x14200 tmoslp softclockmp 97595 448327 0 0 3 0x40014200 tmoslp softclock 80387 29696 0 0 3 0x40014200 idle0 1 486182 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 62784 (syz-executor) thread 0xffff80002a231a08 (44129) exclusive rrwlock inode r = 0 (0xfffffd806d536678) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 uvn_io+0x411 #6 uvn_put+0x125 #7 uvm_pager_put+0x10a #8 uvn_flush+0x690 #9 uvm_vnp_sync+0x1e7 #10 sys_sync+0xda #11 syscall+0xb17 #12 Xsyscall+0x128 exclusive rwlock uvnsync r = 0 (0xffffffff83980158) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_vnp_sync+0x31 #3 sys_sync+0xda #4 syscall+0xb17 #5 Xsyscall+0x128 shared rwlock vfslock r = 0 (0xffff800000c5a060) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 vfs_busy+0x94 #3 sys_sync+0x5d #4 syscall+0xb17 #5 Xsyscall+0x128 Process 52018 (syz-executor) thread 0xffff80002a231ca0 (141949) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a28f40) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 sleep_finish+0x2d8 #3 biowait+0xc6 #4 ffs_freefile+0xbe #5 ffs_inode_free+0x44 #6 ufs_inactive+0x29c #7 VOP_INACTIVE+0x104 #8 vput+0xe5 #9 VOP_REMOVE+0x199 #10 dounlinkat+0x1c4 #11 syscall+0xb17 #12 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c641d80) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vget+0x2a2 #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x1a36 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x98a #11 namei+0x7ca #12 dounlinkat+0xc1 #13 syscall+0xb17 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c67ed78) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vget+0x2a2 #6 cache_lookup+0x351 #7 ufs_lookup+0x1e3 #8 VOP_LOOKUP+0x6e #9 vfs_lookup+0x98a #10 namei+0x7ca #11 dounlinkat+0xc1 #12 syscall+0xb17 #13 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11064 12158K 12346K 166960K 12169 0 pcb 17 12K 12K 166960K 19 0 rtable 237 6K 7K 166960K 359 0 pf 34 17K 18K 166960K 45 0 ifaddr 43 7K 7K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 1484 0 iov 0 0K 4K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1292 81K 81K 166960K 1365 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 12 41K 93K 166960K 144 0 proc 69 115K 163K 166960K 551 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 49 228K 228K 166960K 49 0 exec 0 0K 1K 166960K 390 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 192 158K 169K 166960K 3274 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 37 74K 106K 166960K 1321 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 2 0 NDP 28 2K 2K 166960K 28 0 temp 33 9074K 9140K 166960K 4198 0 kqueue 13 20K 22K 166960K 23 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 37 0 34 1 0 1 1 0 8 0 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 40 0 21 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 10 0 5 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 74 0 65 1 0 1 1 0 8 0 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 18 0 0 1 0 1 1 0 8 0 pfstkey 128 18 0 0 1 0 1 1 0 8 0 pfstate 448 18 0 0 2 0 2 2 0 8 0 pfrule 1360 21 0 15 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 453 0 0 29 0 29 29 0 8 0 art_table 40 454 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1574 0 106 92 0 92 92 0 8 0 ffsino 296 1576 0 108 114 0 114 114 0 8 0 nchpl 144 1787 0 84 64 0 64 64 0 8 0 vnodes 216 1669 0 0 93 0 93 93 0 8 0 namei 1024 5484 0 5484 2 0 2 2 0 8 2 percpumem 16 50 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 6308 0 6307 10 2 8 8 1 8 7 plimitpl 152 125 0 108 1 0 1 1 0 8 0 sigapl 424 468 0 426 7 0 7 7 0 8 1 knotepl 120 53 0 0 2 0 2 2 0 8 0 kqueuepl 224 20 0 11 1 0 1 1 0 8 0 pipepl 344 126 0 99 3 0 3 3 0 8 0 fdescpl 528 452 0 426 3 0 3 3 0 8 0 filepl 160 1602 0 1390 10 0 10 10 0 8 0 lockfpl 104 8 0 6 1 0 1 1 0 8 0 lockfspl 48 5 0 3 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 85 0 71 1 0 1 1 0 8 0 zombiepl 144 431 0 426 1 0 1 1 0 8 0 processpl 1232 468 0 426 5 0 5 5 0 8 0 procpl 664 488 0 443 5 0 5 5 0 8 0 sockpl 752 151 0 120 4 0 4 4 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 117 0 0 15 0 15 15 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 119 0 0 8 0 8 8 0 8 0 bufpl 280 2323 0 105 159 0 159 159 0 8 0 anonpl 32 3882 0 0 32 0 32 32 0 246 0 amapchunkpl 152 8860 0 8518 21 0 21 21 0 158 2 amappl16 200 1851 0 1837 5 0 5 5 0 8 4 amappl15 192 4 0 3 1 0 1 1 0 8 0 amappl14 184 439 0 438 1 0 1 1 0 8 0 amappl13 176 122 0 110 1 0 1 1 0 8 0 amappl12 168 706 0 681 2 0 2 2 0 8 0 amappl11 160 9 0 9 1 0 1 1 0 8 1 amappl10 152 67 0 53 1 0 1 1 0 8 0 amappl9 144 262 0 261 1 0 1 1 0 8 0 amappl8 136 107 0 106 1 0 1 1 0 8 0 amappl7 128 151 0 137 1 0 1 1 0 8 0 amappl6 120 213 0 212 1 0 1 1 0 8 0 amappl5 112 98 0 88 1 0 1 1 0 8 0 amappl4 104 288 0 269 1 0 1 1 0 8 0 amappl3 96 1543 0 1464 3 0 3 3 0 8 0 amappl2 88 543 0 484 2 0 2 2 0 8 0 amappl1 80 9582 0 8995 16 0 16 16 0 8 3 amappl 88 2534 0 2413 4 0 4 4 0 92 0 uvmvnodes 80 102 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 452 0 426 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 452 0 426 1 0 1 1 0 8 0 vmmpekpl 168 5537 0 5498 2 0 2 2 0 8 0 vmmpepl 168 37298 0 35676 87 0 87 87 0 357 3 vmsppl 488 451 0 426 5 0 5 5 0 8 1 rwobjpl 80 14087 0 13115 25 1 24 24 0 8 1 pdppl 4096 911 0 852 101 16 85 85 0 8 26 pvpl 32 10666 0 0 87 0 87 87 0 265 0 pmappl 256 451 0 426 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 267 0 18 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff834278dd) at panic+0x1e5 ffs_freefile(fffffd806c641ce0,665e,2000) at ffs_freefile+0x45f ffs_inode_free(fffffd806c641ce0,665e,2000) at ffs_inode_free+0x44 ufs_inactive(ffff80002a336ab0) at ufs_inactive+0x29c VOP_INACTIVE(fffffd8066750440,ffff80002a231ca0) at VOP_INACTIVE+0x104 vput(fffffd8066750440) at vput+0xe5 VOP_REMOVE(fffffd8066750008,fffffd8066750440,ffff80002a336c18) at VOP_REMOVE+0x199 dounlinkat(ffff80002a231ca0,ffffff9c,75edd15662c0,0) at dounlinkat+0x1c4 syscall(ffff80002a336d90) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75edd1566770, count: -11 ddb{0}> machine ddbcpu 1