last executing test programs: 406.756087ms ago: executing program 3 (id=4): open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) mknod(&(0x7f00000001c0)='./file0\x00', 0x2006, 0x4f4b) r2 = open(&(0x7f00000003c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r2, 0xc2c04200, &(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1dd47e34, 0x0, {[0xfffffbeffffffffb, 0xf7, 0x1000000000004787, 0x1000, 0x5, 0xc70, 0xa, 0xffffffffffffffff, 0x0, 0x80000001, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000044, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffb, 0x5d, 0x6, 0x2, 0x8, 0x1000000000007b9a, 0x7f, 0x0, 0x2, 0x3], [0x5ad7, 0x0, 0x8000000000010001, 0x0, 0x6, 0x3, 0xfffffffffffffffa], [0x100, 0x20000000001, 0xfffffffffffffffc, 0x8000000100000000, 0xfefffffffffffffe, 0x3], [{0x0, 0xfffffffd, 0x0, 0x3}, {0x7, 0x8000002, 0x1, 0x7b}, {0x0, 0x4, 0xfffffffb, 0x9}, {0x2, 0x100, 0x82, 0xfffffffffffffffd}, {0xfffc, 0x2, 0x1, 0x7ffffffffffffff9}, {0x0, 0x2009, 0x40000, 0xffd}, {0x6b7, 0x0, 0x1}, {0x8, 0x101, 0x0, 0x8}], {0x2, 0x9, 0x6, 0x400}, {0x21, 0x6, 0x100000b0, 0x2}}}) r3 = kqueue() kevent(r3, &(0x7f0000000000), 0x96, &(0x7f00000003c0), 0xfffb4161, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETA(r4, 0xcd504404, &(0x7f0000000040)={0x20000b, 0x1, 0x1, 0x2, "cd0000008000000000000000001500", 0x40048003, 0x6}) r5 = kqueue() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) accept(0xffffffffffffffff, 0xfffffffffffffffe, &(0x7f00000014c0)) kevent(r5, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffffb, 0x45, 0x1, 0x8, 0x6}], 0x1005, 0x0, 0x37, 0x0) acct(&(0x7f0000000100)='./file0\x00') acct(0x0) r6 = socket(0x2, 0x2, 0x0) r7 = socket(0x2, 0x400000000002, 0x0) setsockopt$sock_int(r7, 0xffff, 0x800, &(0x7f0000000040)=0x7f, 0x4) setsockopt(r7, 0x0, 0x7, &(0x7f0000000080)="c5f5d915", 0x4) dup2(r7, r6) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r6, &(0x7f0000000000), 0x10) r8 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) 404.059665ms ago: executing program 1 (id=2): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='x\x00') write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 394.196103ms ago: executing program 0 (id=1): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x0) r1 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r0, 0x0) r2 = kqueue() kevent(r2, 0x0, 0x5, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x6}) 392.501051ms ago: executing program 4 (id=5): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) pipe(&(0x7f0000000180)) r1 = socket(0x2, 0x4001, 0x0) r2 = socket(0x2, 0x3, 0xb2) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000080)=0x3) r3 = getppid() r4 = geteuid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x0, r4, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x10000000000000, r3, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1005, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x2, 0x3, 0x0) bind(r5, &(0x7f0000000000), 0x10) r6 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0206983, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000001080)=0x7fff, 0x4) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x7, 0x8, 0x3, 0x5}, {0x50, 0x1, 0x8, 0x81}, {0x186, 0x40, 0x5, 0x10}]}) write(r0, &(0x7f0000000480)="579f502d51f525e5e0b2d7b13eab", 0xe) 381.338691ms ago: executing program 6 (id=7): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0x9, 0x20006}, {0x4, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x800001}]}) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="fd0300668f547443beebf31141f00ed581643f2a6266", 0x16}], 0x1, 0xa0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="9f68ebfa1005598c709fc88d481886171e5d91afc5", &(0x7f0000000000)=0x15, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x0, 0x9, 0x1c6b, 0x7ffffffd, "c2a6d203afdf0000000000000000008000", 0x5, 0x8}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) write(r1, &(0x7f0000000740)="590bd50666e24daa5275d333e860b7a4f4fbe93f22a311377010f6fc1e02e382091b3ac623e3739b8a598f0caa36c93343d7862756f13ad6cd4d41899aae66967854d333935eaa0d3ee3cdd3b147f2afdacc96266a03bda900d364cb11224fb955eb97c5dc5099ca5c28877159ee94e7f73013f20d9209c02a1c49d203ca96e95b9707cd3d28d634b6fc9e6d51c9af518a29203c158648ba8cda3ba5cb918319cba8a48bc27434e6b344ebe2d289c72a3c6324c8edacf98d19f50b3b423ef0fd04d8e09bfc0c5f724ce9417d8028", 0xce) execve(0x0, 0x0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/244, 0xf4}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0x9, 0x20006}, {0x4, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x800001}]}) (async) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="fd0300668f547443beebf31141f00ed581643f2a6266", 0x16}], 0x1, 0xa0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="9f68ebfa1005598c709fc88d481886171e5d91afc5", &(0x7f0000000000)=0x15, 0x0, 0x0) (async) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async) syz_open_pts() (async) close(r1) (async) syz_open_pts() (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x0, 0x9, 0x1c6b, 0x7ffffffd, "c2a6d203afdf0000000000000000008000", 0x5, 0x8}) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) write(r1, &(0x7f0000000740)="590bd50666e24daa5275d333e860b7a4f4fbe93f22a311377010f6fc1e02e382091b3ac623e3739b8a598f0caa36c93343d7862756f13ad6cd4d41899aae66967854d333935eaa0d3ee3cdd3b147f2afdacc96266a03bda900d364cb11224fb955eb97c5dc5099ca5c28877159ee94e7f73013f20d9209c02a1c49d203ca96e95b9707cd3d28d634b6fc9e6d51c9af518a29203c158648ba8cda3ba5cb918319cba8a48bc27434e6b344ebe2d289c72a3c6324c8edacf98d19f50b3b423ef0fd04d8e09bfc0c5f724ce9417d8028", 0xce) (async) execve(0x0, 0x0, 0x0) (async) readv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/244, 0xf4}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) (async) 354.391475ms ago: executing program 7 (id=8): syz_emit_ethernet(0xbf1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='x\x00') open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/258, 0x102}], 0x1, 0x0}, 0x6}, 0x10, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x3a0914c44f7b202d, 0x65) r2 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x1) poll(&(0x7f0000000100)=[{r2, 0xee}], 0x1, 0x0) close(r1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x20}, {0x3, 0x0, 0x0, 0x49}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000000)=0x4, 0x0, 0x37) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)="009db1d758d666f6274ecc549b7dd3b8863b4b788e895204f585a3d6c737ce233d46f36c26ac77a9c92e67d295992466832fa25063983e5210cf92d9cfe7d138d3ab707b92269982a8ecece63d4950e17b977bd668783c562dfc9398d03e7e27824c495ac29ab493022e84580a94e952043e5c4d9b3e8126", 0x78}, {&(0x7f0000000440)="4d245fcade85bb7b246a655c56722d2ad69138b8f36d7b7cb6eb3ebab662c93c37db28203b167fcd776668d12fe635ce2314f75cc6c19553449de85242cbd66d44466eee2bd6a00e4be32a10abc5f554cff4a64ad9a3452ff990150bd4428b6b651a29fbd78e1c108ede47368eb09a42359f1ec2bdb97c10c1da7a8113cdec04e0f79a608dd07f08544de071f196a25aed310efddc7b3d6e2afaeb34d4da6b6087e82ae374e711b9d9deaefb800900000000", 0xfffffd1e}, {&(0x7f0000000500)="1047d5b5f1d3207ce2dec6e8b17c5a9be2420bd553a78ee24fd2ee49b15588f7ca9cbb6155d6db2b51bfe6e3261f8082fbe3d2c0d4f97f7a27ae163ed424a8cbc6e9108c0011a2d5cc0763fecffbb250db30add115b2766c92f142b4901ed521c2598f621e93ed3da0cf", 0x6a}], 0x3) 294.305694ms ago: executing program 0 (id=9): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0xfffffff1, 0x7fff) r2 = socket(0x18, 0x3, 0x1) (async) syz_emit_ethernet(0xd9, &(0x7f0000000080)={@local, @random="beedc02fa94d", [], {@generic={0x1600, "bee4ac81f8b76b5d48cfd74ac0bae7fdc9bb3dcbb6c774f61c56333e227d40cac4c447df56c3fcbd28441f7e433e2b072243ed4b6d6b7b678064a64da7e7b2ad8783f1e4640fe5bb26cdb9d64f06f0ef54b5e624201bff879f6c25ed82261aa80aa911fe223882f9c2ffd6a7e54a92e02ec8d884ea115e0444ca3dc5f66f1ef9a1fd961de8e21c80691f88f954923ea0b1b7e67ee5a4cfa4d5827493ef02ea2aafb31066f58cb66d7e71d4771df2718d734d0f93796054cb983de8cdf0b674ef736d7a7328086b450f4c42"}}}) (async, rerun: 32) syz_extract_tcp_res(&(0x7f0000000180), 0x2, 0x37c) (async, rerun: 32) syz_emit_ethernet(0x108, &(0x7f00000001c0)={@random="4dd455af2b03", @random="eccaafe113bf", [{[{0x88a8, 0x4, 0x0, 0x3}], {0x8100, 0x2, 0x1}}], {@ipv4={0x800, {{0x17, 0x4, 0x0, 0x1, 0xf2, 0x64, 0x8001, 0x5, 0x16, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0x2b, 0x0, [@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @broadcast, @loopback, @broadcast, @broadcast, @multicast2, @remote={0xac, 0x14, 0x0}, @multicast1, @loopback]}, @lsrr={0x83, 0x1b, 0xff, [@multicast2, @multicast2, @local={0xac, 0x14, 0x0}, @multicast2, @multicast1, @multicast1]}]}}, @generic="9a11344550bcc33c5218f43ccdf40ff29dadeb424547c59e999266630bd9b1ac97b663636272ee263464d15718c1ecc27697e6daa9580b69b337fcbea83717721a8f92a17784992f68e4ac8ddd7f60cfc48fae9d4bcee8a56c3c6017c05a9b9af4deb710d58e5b9a0716ff8ca4637b3b8a82335b3f31b5803368fbc08f51ebc5e922b884520bf17278f5c54286a8a8151172718e3a27"}}}}) r3 = socket$inet6(0x18, 0x0, 0xc8) shutdown(r3, 0x1) (async) r4 = socket$inet6(0x18, 0x3, 0x62) recvmmsg(r4, &(0x7f0000001700)={&(0x7f00000016c0)={&(0x7f0000000300)=@in6, 0xc, &(0x7f0000001600)=[{&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/229, 0xe5}, {&(0x7f0000001540)=""/137, 0x89}], 0x4, &(0x7f0000001640)=""/113, 0x71}, 0x401}, 0x10, 0x1, &(0x7f0000001740)={0x8, 0x3}) (async) syz_emit_ethernet(0x8b, &(0x7f0000001780)={@broadcast, @local, [], {@generic={0x805b, "2811815d69d5cbf06151d8a83b6d13f67a7595350691b856d2f371e8ff6e8be41dddd1916a2e1c9ef80422dfcbe3d79573db4b8305a045dda6dba6cc95cf25c540033eecadfdedfd973baa912817f0be1dea0ac735e72871cee7c730970ecebe4d5286f3f8ee23731edfef16141a58985ffe861d854560115873644fdb"}}}) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r4, 0x400c570a, &(0x7f0000001840)) (async) syz_emit_ethernet(0x195, &(0x7f0000001880)={@local, @remote, [], {@ipv4={0x800, {{0x14, 0x4, 0x3, 0x0, 0x187, 0x66, 0x4, 0xb3, 0x11, 0x0, @loopback, @multicast1, {[@generic={0x7, 0x3, "cb"}, @generic={0x89, 0x11, "cbff4bf962f206691d3ff134c99ca3"}, @timestamp={0x44, 0x18, 0x6, 0x0, 0x3, [{[], 0x7fffffff}, {[@broadcast], 0x2}, {[@local={0xac, 0x14, 0x0}], 0x2}]}, @rr={0x7, 0xf, 0xa, [@loopback, @multicast1, @empty]}]}}, @tcp={{0x0, 0x2, r0, r1, 0x1, 0x0, 0xf, 0x10, 0x101, 0x0, 0x75, {[@sack_perm={0x4, 0x2}, @eol, @sack={0x5, 0x16, [0x101, 0x1000000, 0x2, 0xac, 0x4]}, @sack_perm={0x4, 0x2}, @generic={0x0, 0x4, "ad76"}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x2}, @nop, @sack_perm={0x4, 0x2}]}}, {"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"}}}}}}) (async) syz_extract_tcp_res$synack(&(0x7f0000001a40), 0x1, 0x0) (async) getpeername$inet(r2, &(0x7f0000001a80), &(0x7f0000001ac0)=0xc) r5 = open(&(0x7f0000001b00)='./file0\x00', 0x80, 0x14a) (async, rerun: 64) r6 = socket(0x10, 0x4000, 0xe) (rerun: 64) getsockopt$sock_int(r6, 0xffff, 0x1008, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) (async) setrlimit(0x7, &(0x7f0000001bc0)={0xd2e, 0x401}) (async) syz_emit_ethernet(0xf7, &(0x7f0000001c00)={@empty, @empty, [{[], {0x8100, 0x5, 0x1, 0x2}}], {@ipv6={0x86dd, {0x0, 0x6, "e0eb50", 0xbd, 0x33, 0x5, @local={0xfe, 0x80, '\x00', 0x0}, @loopback, {[@routing={0x0, 0x6, 0x0, 0xff, 0x0, [@rand_addr="685032a899e2b99c0a1e820df5e2cac5", @rand_addr="007342981ee1d3468ced0521a9154c66", @ipv4]}, @dstopts={0x2e, 0x0, '\x00', [@ra={0x5, 0x2, 0x93}]}, @fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x5, 0x68}, @dstopts={0x19, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xe}]}], @udp={{0x1, 0x2, 0x8}, {"c75befb29fab481213e314bee5c0d291a6659431104e728ebaffd5e868c6694445fc35cef7d4ac0a9ea55540c1511d8a44380878fd615435e88516df07"}}}}}}}) (async) ioctl$WSKBDIO_BELL(r5, 0x20005701) close(r2) ioctl$WSDISPLAYIO_USEFONT(r5, 0x80585750, &(0x7f0000001d00)={'./file0\x00', 0x80000001, 0xfff, 0x8, 0x1, 0x43, 0x2, 0xf01, 0x0, 0x1, 0x6, 0x76493667}) (async) ioctl$KDSETRAD(r5, 0x20004b43) syz_extract_tcp_res$synack(&(0x7f0000001d80), 0x1, 0x0) (async) r7 = dup2(r3, r4) (async) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000001dc0), 0xc) close(r3) (async) ioctl$WSKBDIO_BELL(r7, 0x20005701) (async, rerun: 32) syz_emit_ethernet(0xdd, &(0x7f0000001e00)={@broadcast, @local, [], {@ipv4={0x800, {{0x17, 0x4, 0x3, 0x2, 0xcf, 0x68, 0x3, 0xb1, 0x11, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0x1f, 0x1d, [@remote={0xac, 0x14, 0x0}, @empty, @empty, @local={0xac, 0x14, 0x0}, @rand_addr=0x4, @remote={0xac, 0x14, 0x0}, @multicast1]}, @lsrr={0x83, 0xb, 0xa4, [@multicast2, @local={0xac, 0x14, 0x0}]}, @ssrr={0x89, 0x1b, 0xf9, [@empty, @local={0xac, 0x14, 0x0}, @broadcast, @broadcast, @rand_addr=0x6, @multicast1]}]}}, @udp={{0x1, 0x2, 0x8}, {"e802fd088342d7d8904399838ac875f483452a68db47e2d65fcd451c521d2ba62cc16c8b9c70196978f9c3cf3698aa0a43d7f0335b99d5dace7115a72ead03f8986d85a1f7cf1750fc4bd38aeddb44212b16fce6a82d036277aaebf0ed1064dde79225574074f692127145"}}}}}}) (rerun: 32) 293.812828ms ago: executing program 3 (id=10): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x8, 0x80002001, 0x1, 0x10, [{0x0, 0x7, 0x4, 0x4000001}, {0x7, 0x4, 0xa, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x0, 0x7}, {0x6, 0xff, 0xe, 0x7}, {0x6, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x7ffd, 0xc7, 0x8b}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0x80000001, 0x0, 0x0, 0x0, 0x1, 0x200023, 0x2}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0xfffffffffffffffd, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000100)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000e40)={@local, @remote, [], {@generic={0x8847}}}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4c, 0x92, 0xf5, 0x200}, {0x87, 0xf, 0xdf, 0xfff}, {0x406, 0x7, 0x8, 0x4c9}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 293.257737ms ago: executing program 7 (id=11): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() r1 = socket$inet(0x2, 0x2, 0x2) kevent(r0, &(0x7f0000001840)=[{{r1}, 0xfffffffffffffffa, 0x75, 0x1, 0x9, 0xf62d}, {{r0}, 0x0, 0x17, 0x10, 0x103, 0x8}, {{r1}, 0xfffffffffffffffc, 0x4, 0x2, 0x7, 0xffffffffffffffff}, {{r0}, 0xffffffffffffffff, 0x0, 0xfffff, 0x3, 0x6fc}, {{r1}, 0xfffffffffffffffc, 0x20, 0x4, 0x7, 0x5cd39f70}, {{r1}, 0xfffffffffffffffe, 0x4, 0x1, 0x4, 0x100000001}], 0x8, &(0x7f0000000280)=[{{r0}, 0xffffffffffffffff, 0x4, 0x80000000, 0x8, 0x10}, {{r0}, 0xfffffffffffffff8, 0x18, 0x1, 0x6, 0x6}, {{r0}, 0x1a67d7e6f4274ad1, 0x4, 0x2, 0x5969caeb, 0x16}, {{r0}, 0xffffffffffffffff, 0x1, 0x40, 0x3, 0x1}], 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1901) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file2\x00', 0x6, 0x2000003, 0xeffffff9, 0x1, 0x5, 0x8, 0x6, 0x1, 0x2, 0x4001, 0x7f}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) setitimer(0x0, &(0x7f0000000040)={{0x7, 0x6}, {0xff, 0xaaa4}}, &(0x7f0000000240)) r3 = syz_open_pts() ioctl$TIOCDRAIN(r3, 0x2000745e) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x3, 0x2, 0x40009, 0x0, 0x5, 0xd87, 0x40, 0x1, 0x0, 0x100000000642, 0x3}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r4, &(0x7f0000000040)="6ce1b0", 0x3) r5 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x1) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000000400)=""/122, 0x7a}, {&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000580)=""/105, 0x69}, {&(0x7f0000000600)=""/18, 0x12}, {&(0x7f0000000640)=""/245, 0xf5}], 0x7) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0xd4, 0xa, 0xffffffff, 0x0, 0x10, [{0xfe5, 0x7, 0x0, 0x71000}, {0x7, 0x4, 0x6, 0x4}, {0x10000006, 0xf86, 0x0, 0x40004}, {0x5, 0x800, 0x7, 0xec}, {0x6, 0x10000002, 0x80e, 0x10000}, {0x6, 0x1, 0x0, 0x800009c}, {0x8, 0xffffffff, 0x1003, 0x71}, {0xa, 0x10000803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x406, 0x8001, 0xce, 0x800000b}, {0x4, 0xfffb, 0x3, 0x80}, {0x803, 0x40, 0x8, 0x1}, {0xe0, 0x4, 0x5, 0x3}, {0xffff0354, 0xfffffffa, 0x4, 0x100006}, {0x0, 0x6, 0x7, 0x1ffffffd}, {0x0, 0x1, 0x4, 0xc3}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x7, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x1) close(r5) 292.180399ms ago: executing program 1 (id=12): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r0 = syz_open_pts() syz_emit_ethernet(0x19, &(0x7f0000000040)={@broadcast, @remote, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @remote, @empty, @empty, @loopback}}}}) setrlimit(0x5, &(0x7f0000000080)={0x8000000000000001, 0x8}) close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x47) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000100)="812d08f7", 0x4}], 0x1) read(r1, &(0x7f0000000200)=""/145, 0x91) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r3, 0x0) fcntl$lock(r2, 0x0, &(0x7f0000000640)={0x3, 0x0, 0x5, 0x2}) 9.657872ms ago: executing program 3 (id=13): r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x4ebfac6bbaf7959) unveil(&(0x7f0000000500)='.\x00', &(0x7f00000002c0)='r\x00') r1 = shmget$private(0x0, 0x1000, 0xc0, &(0x7f0000fff000/0x1000)=nil) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) close(r2) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$VNDIOCSET(r4, 0x8004630a, &(0x7f0000000100)={0x0, 0x0, 0x0}) getdents(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setregid(r6, 0x0) r7 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r7, 0xffff, 0x1024, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) seteuid(r8) getgroups(0x3, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) r10 = getppid() r11 = getppid() r12 = getegid() getitimer(0x2, &(0x7f0000000140)) shmctl$IPC_SET(r1, 0x1, &(0x7f00000000c0)={{0x8, 0xffffffffffffffff, r12, r8, r9, 0x10, 0x80}, 0x0, 0x7, r10, r11, 0x2, 0x1, 0x3}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x72d01b29) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) link(&(0x7f0000000080)='./file0\x00', 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x815, r0, 0x6) 5.325215ms ago: executing program 1 (id=14): r0 = open(0x0, 0x615, 0x1) getpgid(0x0) (async) getpgid(0x0) fcntl$lock(r0, 0x8, 0x0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000100)={'./file0\x00', 0x5c16, 0xd5, 0xffff, 0x1, 0x0, 0xfffffffd, 0x91a, 0x2, 0x2, 0x2c40, 0x2}) open(0x0, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x6) setgid(0xffffffffffffffff) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x8, 0x2, 0x100200000, 0x6, 0x7, 0x8, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0x200, 0x1, 0x100000001, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x8, 0x5e, 0x7fffffff, 0x80000000000001fe], [0x91f, 0x8000, 0x40000000, 0x0, 0xb, 0xffffffffffffffff, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x2100000000, 0x522deb15, 0x7], [{0x5, 0x4, 0x0, 0xfff}, {0x9, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x6, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000003}, {0x2, 0x0, 0xfffffff9, 0x9}, {0x5, 0x100, 0x80f, 0xb}], {0x1, 0x1005, 0x7, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x8, 0x2, 0x100200000, 0x6, 0x7, 0x8, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0x200, 0x1, 0x100000001, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x8, 0x5e, 0x7fffffff, 0x80000000000001fe], [0x91f, 0x8000, 0x40000000, 0x0, 0xb, 0xffffffffffffffff, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x2100000000, 0x522deb15, 0x7], [{0x5, 0x4, 0x0, 0xfff}, {0x9, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x6, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000003}, {0x2, 0x0, 0xfffffff9, 0x9}, {0x5, 0x100, 0x80f, 0xb}], {0x1, 0x1005, 0x7, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}}) socket(0x18, 0x3, 0x0) (async) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x8020699f, &(0x7f0000000100)) (async) ioctl$FIONREAD(r1, 0x8020699f, &(0x7f0000000100)) setgroups(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r3 = geteuid() pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000140), 0xc) (async) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000140), 0xc) setuid(r3) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) kqueue() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x25, 0xfe, 0x7}, {0x4c, 0x53, 0x9, 0x37}, {0x9e, 0x19, 0x0, 0x95c}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2a}, 0x2, 0x0, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0xa) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[]) (async) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[]) 0s ago: executing program 0 (id=15): setitimer(0x41562ac0a1b12e1f, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) r0 = kqueue() openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000000c0)=0x8) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x10004) close(r1) open(0x0, 0x80000000000206, 0x4ebfac6bbaf79e5) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0xc}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x38, 0x0, 0xffffffffffffffcb) lseek(r1, 0x9, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.253' (ED25519) to the list of known hosts. panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/main/kernel/sys/net/rtable.c", line 132 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *344985 60147 0 0x10 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff8335e571) at panic+0x1cf __assert(ffffffff8339bd24,ffffffff8337768c,84,ffffffff833ec66b) at __assert+0x29 rtmap_grow(9,21) at rtmap_grow+0x1f2 rtable_add(8) at rtable_add+0x289 if_createrdomain(8,ffff80000146d000) at if_createrdomain+0x40 ifioctl(ffff800010fded00,8020699f,ffff80003c96bbc0,ffff80003c94ad18) at ifioctl+0x1ae0 sys_ioctl(ffff80003c94ad18,ffff80003c96bd90,ffff80003c96bce0) at sys_ioctl+0x660 syscall(ffff80003c96bd90) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9911721e3b0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/main/kernel/sys/net/rtable.c", line 132 ddb> trace db_enter() at db_enter+0x25 panic(ffffffff8335e571) at panic+0x1cf __assert(ffffffff8339bd24,ffffffff8337768c,84,ffffffff833ec66b) at __assert+0x29 rtmap_grow(9,21) at rtmap_grow+0x1f2 rtable_add(8) at rtable_add+0x289 if_createrdomain(8,ffff80000146d000) at if_createrdomain+0x40 ifioctl(ffff800010fded00,8020699f,ffff80003c96bbc0,ffff80003c94ad18) at ifioctl+0x1ae0 sys_ioctl(ffff80003c94ad18,ffff80003c96bd90,ffff80003c96bce0) at sys_ioctl+0x660 syscall(ffff80003c96bd90) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9911721e3b0, count: -10 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003c96b8f0 rbx 0x21 rdx 0 rcx 0 rax 0xffff80003c94ad18 r8 0x101010101010101 r9 0x8080808080808080 r10 0xe93471a0d604fe56 r11 0xd9f8bf9d927748d6 r12 0 r13 0x1 r14 0 r15 0x1 rip 0xffffffff82065215 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c96b8e0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=344985 pid=60147 tcnt=4 stat=onproc flags process=10 proc=4000000 runpri=50, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c94a550,0xffff80003c94a7f8 process=0xffff8000ffffa418 user=0xffff80003c966000, vmspace=0xfffffd807047ba28 estcpu=0, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 60147 484941 93446 0 2 0x10 syz-executor 60147 109236 93446 0 2 0x4000010 syz-executor *60147 344985 93446 0 7 0x4000010 syz-executor 60147 147059 93446 0 3 0x4000090 fsleep syz-executor 7768 200545 63664 0 2 0 syz-executor 7768 437131 63664 0 2 0x4000000 syz-executor 91424 353475 20934 0 2 0 syz-executor 91424 429458 20934 0 3 0x4000080 fsleep syz-executor 42166 62502 97749 0 2 0 syz-executor 42166 521079 97749 0 3 0x4000080 fsleep syz-executor 28254 44299 65226 0 2 0 syz-executor 28254 186867 65226 0 3 0x4000080 fsleep syz-executor 28254 283348 65226 0 3 0x4000080 fsleep syz-executor 28254 214686 65226 0 3 0x4000080 fsleep syz-executor 29919 71472 68443 0 2 0x2 ifconfig 68443 299487 55263 0 3 0x10008a sigsusp sh 51346 421958 86781 0 2 0x100002 sh 58820 479540 29802 0 2 0x2 syz-executor 65226 453590 29802 0 2 0xc82 syz-executor 86781 377492 29802 0 3 0x82 wait syz-executor 97749 479741 29802 0 3 0x82 nanoslp syz-executor 20934 328473 29802 0 2 0xc82 syz-executor 55263 510035 29802 0 3 0x82 wait syz-executor 93446 127214 29802 0 3 0x82 nanoslp syz-executor 63664 362853 29802 0 3 0x82 nanoslp syz-executor 29802 490274 69649 0 2 0x2 syz-executor 69649 248062 60274 0 3 0x10008a sigsusp ksh 60274 373774 18325 0 3 0x98 kqread sshd-session 18325 377988 13389 0 3 0x92 kqread sshd-session 87439 488397 1 0 3 0x100083 ttyin getty 13389 281203 1 0 3 0x88 kqread sshd 80751 93241 2790 73 3 0x1100090 kqread syslogd 2790 498182 1 0 3 0x100082 sbwait syslogd 17009 355011 1 0 3 0x100080 kqread resolvd 55831 221885 14956 77 3 0x100092 kqread dhcpleased 92684 107607 14956 77 3 0x100092 kqread dhcpleased 14956 501936 1 0 3 0x80 kqread dhcpleased 80580 108326 0 0 3 0x14200 bored smr 57813 91952 0 0 2 0x14200 zerothread 36580 317314 0 0 3 0x14200 aiodoned aiodoned 91809 422490 0 0 2 0x14e00 update 81158 20881 0 0 3 0x14200 cleaner cleaner 98742 434356 0 0 3 0x14200 reaper reaper 18175 158895 0 0 3 0x14200 pgdaemon pagedaemon 98438 14974 0 0 3 0x14200 bored viomb 18650 99329 0 0 3 0x40014200 acpi0 acpi0 81540 423186 0 0 3 0x14200 bored softnet0 51833 218295 0 0 3 0x14200 bored systqmp 13213 1418 0 0 3 0x14200 bored systq 1476 255061 0 0 3 0x40014200 tmoslp softclock 63119 254592 0 0 3 0x40014200 idle0 1 192435 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10176 11177K 11182K 166960K 11268 0 pcb 19 12K 12K 166960K 25 0 rtable 197 5K 5K 166960K 299 0 pf 30 12K 13K 166960K 37 0 ifaddr 36 6K 6K 166960K 40 0 ifgroup 50 2K 2K 166960K 54 0 sysctl 1 1K 9K 166960K 5 0 counters 32 17K 18K 166960K 34 0 ioctlops 0 0K 4K 166960K 32 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1340 84K 84K 166960K 1361 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1732 201K 291K 166960K 11958 0 file desc 18 65K 110K 166960K 135 0 proc 58 66K 100K 166960K 443 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1 0 in_multi 77 5K 6K 166960K 81 0 ether_multi 1 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 55 254K 254K 166960K 55 0 exec 0 0K 1K 166960K 342 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 216 152K 159K 166960K 2809 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 39 78K 94K 166960K 1162 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 23 1K 1K 166960K 25 0 temp 34 8642K 8706K 166960K 3646 0 kqueue 13 20K 27K 166960K 29 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 32 0 29 1 0 1 1 0 8 0 rtentry 136 89 0 1 4 0 4 4 0 8 0 unpcb 144 33 0 18 1 0 1 1 0 8 0 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 736 10 0 5 1 0 1 1 0 8 0 arp 96 14 0 0 1 0 1 1 0 8 0 inpcb 328 64 0 52 2 1 1 2 0 8 0 ip6q 72 1 0 0 1 0 1 1 0 8 0 ip6af 40 1 0 0 1 0 1 1 0 8 0 nd6 112 18 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 2 0 2 1 0 1 1 0 8 1 pfrule 1344 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 365 0 0 23 0 23 23 0 8 0 art_table 40 366 0 0 4 0 4 4 0 8 0 art_node 32 89 0 9 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1563 0 58 95 0 95 95 0 8 0 ffsino 256 1563 0 58 95 0 95 95 0 8 0 nchpl 144 1765 0 77 63 0 63 63 0 8 0 vnodes 216 1648 0 0 92 0 92 92 0 8 0 namei 1024 5047 0 5046 3 2 1 2 0 8 0 kstatmem 264 26 0 4 2 0 2 2 0 8 0 scxspl 216 5801 0 5801 2 1 1 2 1 8 1 plimitpl 152 30 0 13 1 0 1 1 0 8 0 sigapl 424 414 0 371 6 0 6 6 0 8 0 knotepl 120 2685 0 2637 2 0 2 2 0 8 0 kqueuepl 184 26 0 16 1 0 1 1 0 8 0 pipepl 304 115 0 86 3 0 3 3 0 8 0 fdescpl 448 401 0 371 5 0 5 5 0 8 0 filepl 120 1454 0 1233 7 0 7 7 0 8 0 lockfpl 104 10 0 6 1 0 1 1 0 8 0 lockfspl 48 7 0 3 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 29 0 13 1 0 1 1 0 8 0 ucredpl 104 79 0 67 1 0 1 1 0 8 0 zombiepl 144 371 0 371 1 0 1 1 0 8 1 processpl 1152 415 0 371 4 0 4 4 0 8 0 procpl 664 433 0 380 5 0 5 5 0 8 0 sockpl 552 129 0 99 3 0 3 3 0 8 0 mcl64k 65536 1 0 1 1 1 0 1 0 8 0 mcl8k 8192 4 0 4 1 1 0 1 0 8 0 mcl4k 4096 2461 0 2406 13 4 9 13 0 8 0 mcl2k 2048 235 0 235 1 0 1 1 0 8 1 mtagpl 96 4 0 4 1 1 0 1 0 8 0 mbufpl 256 4035 0 3930 8 0 8 8 0 8 0 bufpl 280 2285 0 118 155 0 155 155 0 8 0 anonpl 24 97106 0 94075 23 3 20 23 0 187 0 amapchunkpl 152 7953 0 7538 18 1 17 17 0 158 0 amappl16 200 1866 0 1851 5 3 2 5 0 8 0 amappl15 192 9 0 9 1 1 0 1 0 8 0 amappl14 184 11 0 11 1 1 0 1 0 8 0 amappl13 176 389 0 386 1 0 1 1 0 8 0 amappl12 168 727 0 689 2 0 2 2 0 8 0 amappl11 160 4 0 4 1 1 0 1 0 8 0 amappl10 152 109 0 99 1 0 1 1 0 8 0 amappl9 144 243 0 243 1 1 0 1 0 8 0 amappl8 136 30 0 29 1 0 1 1 0 8 0 amappl7 128 94 0 93 1 0 1 1 0 8 0 amappl6 120 244 0 230 1 0 1 1 0 8 0 amappl5 112 80 0 73 1 0 1 1 0 8 0 amappl4 104 360 0 337 1 0 1 1 0 8 0 amappl3 96 1232 0 1156 2 0 2 2 0 8 0 amappl2 88 510 0 445 2 0 2 2 0 8 0 amappl1 80 8553 0 8010 13 0 13 13 0 8 0 amappl 88 2149 0 2004 4 0 4 4 0 92 0 uvmvnodes 80 1648 0 0 34 0 34 34 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 401 0 371 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 401 0 371 1 0 1 1 0 8 0 vmmpekpl 168 4990 0 4960 2 0 2 2 0 8 0 vmmpepl 168 33595 0 31899 76 0 76 76 0 357 0 vmsppl 368 400 0 371 4 0 4 4 0 8 0 rwobjpl 40 14263 0 11798 26 0 26 26 0 8 0 pdppl 4096 808 0 742 96 28 68 82 0 8 2 pvpl 32 208487 0 200339 69 0 69 69 0 265 0 pmappl 216 400 0 371 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 354 0 39 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff8335e571) at panic+0x1cf __assert(ffffffff8339bd24,ffffffff8337768c,84,ffffffff833ec66b) at __assert+0x29 rtmap_grow(9,21) at rtmap_grow+0x1f2 rtable_add(8) at rtable_add+0x289 if_createrdomain(8,ffff80000146d000) at if_createrdomain+0x40 ifioctl(ffff800010fded00,8020699f,ffff80003c96bbc0,ffff80003c94ad18) at ifioctl+0x1ae0 sys_ioctl(ffff80003c94ad18,ffff80003c96bd90,ffff80003c96bce0) at sys_ioctl+0x660 syscall(ffff80003c96bd90) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9911721e3b0, count: -10 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff8335e571) at panic+0x1cf __assert(ffffffff8339bd24,ffffffff8337768c,84,ffffffff833ec66b) at __assert+0x29 rtmap_grow(9,21) at rtmap_grow+0x1f2 rtable_add(8) at rtable_add+0x289 if_createrdomain(8,ffff80000146d000) at if_createrdomain+0x40 ifioctl(ffff800010fded00,8020699f,ffff80003c96bbc0,ffff80003c94ad18) at ifioctl+0x1ae0 sys_ioctl(ffff80003c94ad18,ffff80003c96bd90,ffff80003c96bce0) at sys_ioctl+0x660 syscall(ffff80003c96bd90) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9911721e3b0, count: -10