last executing test programs: 128.818411ms ago: executing program 0 (id=1): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x80, {0x1000000ff}}) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_ipip(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1) sysctl$hw(&(0x7f00000000c0)={0x6, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x27}, 0x4, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d942400b5e1a0757cb9af769c7afec37082", &(0x7f0000000080)=0x306, 0x0, 0x2e) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x55, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) r1 = open(&(0x7f0000000800)='./file1\x00', 0x1, 0xf) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff8, 0xc0, 0x1, 0x8, 0x80}, {{r0}, 0xfffffffffffffffd, 0xc0, 0x2, 0x6e, 0x46ad}, {{}, 0xfffffffffffffffe, 0x1, 0xf0000000, 0x1, 0x8000200000954}, {{}, 0xfffffffffffffff6, 0x26, 0x8, 0xdfffffff, 0xc3d}, {{}, 0xfffffffffffffffb, 0x23, 0x10, 0x8, 0x3}, {{r0}, 0xfffffffffffffffc, 0x0, 0x4, 0xe, 0x100000006}, {{}, 0xfffffffffffffff6, 0x1d, 0x80, 0x2, 0x800100000004}, {{}, 0xfffffffffffffffa, 0x28, 0x2, 0x1f70, 0x7}], 0xb19, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @multicast1}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x12, 0x7f, 0x660, 0x3ff, 0x4}}}}}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$VMM_IOC_WRITEREGS(r1, 0x82485608, &(0x7f00000003c0)={0x44efb1f9, 0xbc4a, 0x7, {[0x4, 0xfffffffffffffc01, 0x9, 0x91, 0xa, 0x5, 0x1cf9, 0x84ee, 0xd, 0x5, 0xffff, 0x6, 0x8, 0x7, 0x9fc, 0x0, 0x5, 0x8], [0x2, 0xf5db, 0x0, 0x8000, 0x5, 0x0, 0x6, 0x2, 0x40c, 0x8], [0x100000001, 0x1, 0x0, 0x7fff, 0x280, 0x9192, 0x1], [0x400, 0x11, 0x3, 0xfffffffffffffffd, 0x8], [{0x7, 0x4, 0x8, 0x3}, {0x7, 0x2, 0x3, 0x8000000000000000}, {0x10, 0x0, 0x7fffffff, 0x2}, {0x1, 0x10000, 0x4536, 0x1b17}, {0xa332, 0x9, 0x1, 0x6}, {0x81, 0xb4c, 0xb, 0xf296}, {0x9976, 0x46, 0x8, 0x400}, {0x5d1, 0x5, 0x6, 0x8}], {0x3f, 0xef0, 0xafac, 0x7}, {0x0, 0x2, 0x1, 0x7ff0}}}) 123.774989ms ago: executing program 3 (id=4): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x4e, 0x2100009, 0x5c0, 0x1, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0xc, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x203, 0x2000002, 0x99}, {0xce1, 0x15, 0x4f8, 0xa}, {0x6, 0x300, 0x55, 0x40000008}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x8001, 0x0, 0x103}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x1}, {0x7, 0x5, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x8000001, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff22}}, 0x38, 0xe) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0xfffe}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x5}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0xe02) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket(0x11, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x102) shutdown(r3, 0x1) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000010000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0xa, 0x0, 0x0) 108.2131ms ago: executing program 1 (id=2): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{0xdeafbead, 0x40006}], 0x1}) clock_gettime(0x0, 0xfffffffffffffffe) sysctl$kern(&(0x7f0000000080)={0x1, 0x51}, 0x2, &(0x7f0000000100)="9a230521a676bf419b6ac3c6d017122741ee575bea3a124e80a228f705bc8a0536b2221a60564c5390cb391b50ef1f20f46916be359f144aa8f56ab26526d06911e32df10f92e411f8794d420ef89273a3a81bcf63aeb664801ef82e312015ad9273fca3e71ae47e33cd9495bb044c848daaf6b890111b685514f7a04ab663557285cf3a4b64d008be0f178d68c4ba90671d020b46de12d97aec892f607d4958b5b15f74cd6cd63b2969ee414fc906534cdb505c7d8cbefc42df16830fc1167a9e8df132d5813a85556e65dc64755488257466c1db6e4b9f9bddcd3fcef1a7c2d842543158d5835765449d5e39997351c9", &(0x7f0000000200)=0xf1, &(0x7f0000000240)="b1232a9eba55502565759742f611e4b7abcfa43d68145df0d5916e382cfd911b98de1109131c2431f67edfd5243ced2b03b239bb0282b0c41d153898d3044ddd8043812e31e13055def9801012840230850247f4bcb6b1c93c78d46f11ea9ab0eefca3c44098fd21737d19d45baf508c0636f21a7618da54a9d877bdecb3db49876c90fa8e5b", 0x86) 102.538361ms ago: executing program 4 (id=5): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x1, 0x7, 0x0, 0x112}, {0x60, 0x9, 0x1d, 0x40001}]}) (async) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x188) (async) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = getpid() setgroups(0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x3, 0xffffffffffffbb2f}, {0xffffffff, 0x4}}, 0x0) (async) setuid(0xee01) (async) r1 = syz_open_pts() fcntl$lock(r1, 0x8, &(0x7f00000000c0)={0x3, 0x2, 0x8, 0x1000300000004}) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x101e5f) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x38a}) r3 = syz_open_pts() close(r3) (async) r4 = syz_open_pts() ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000280)={0x5a, 0x7ffffff7, 0x80027, 0xee6b9a6, "bb080006020900d910040801b7cd0d8c00004000", 0x5, 0x8}) ioctl$TIOCSWINSZ(r4, 0x80087467, 0x0) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$TIOCSETA(r5, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "200000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) (async) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) ioctl$BIOCSETIF(r2, 0xc0104401, &(0x7f0000000040)={'tap', 0x0}) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000002b00fe8000000000000000000000000000bb000000000040751bcfd3a74726df05c2facc51e275200d38bccc03000ed6fba3af9f5d077c1012f1b81911f372842a94f56f205f478901019731c0a921e88b99118463aa0e7b8041cc1b71977bd2cc5d7f9b4a241b1fab14de9e078fbecae2b86ad9c5b63c7a2bece77fb1d9b3e7ed418faa2df57ef17651068f006ddc0b1f7d07629255fb194db772e4e36e898275dce2cd2da6bc27"]) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000008000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x3, 0x1, 0x7ffffffd, 0x0, 0x9bf, 0x7, 0x7ffffffe, 0x1, 0x0, 0x2000007, 0x6}) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) (async) open(&(0x7f0000000800)='./file1\x00', 0x40, 0x2b) 100.137139ms ago: executing program 7 (id=8): r0 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r1 = kqueue() kevent(r1, 0x0, 0x138, 0x0, 0xffffffff, 0x0) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r2, 0x80085762, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x400000000003, [{&(0x7f0000385000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x100}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000644000/0x1000)=nil, &(0x7f0000191000/0x1000)=nil, 0x2}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0x3fd}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, 0x8}, {&(0x7f000055e000/0x4000)=nil, &(0x7f000032f000/0x2000)=nil, 0xa}, {&(0x7f0000613000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f00005d8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f000043b000/0x1000)=nil, &(0x7f000076c000/0x4000)=nil, 0x9}, {&(0x7f00000a5000/0x1000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f0000576000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000009000/0x2000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3dd0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10001, 0x0, 0x0, 0x9, 0x0, 0x401, 0x0, 0x0, 0x3, 0x0, 0x0, 0x87, 0x0, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x2cb28a84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfa65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200006, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0xcb1e, 0x10000, 0x204, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc09, 0x0, 0xfffffffd, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xd09f, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x8]}) r3 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="eaef125c00000000", 0xc) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x114, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x8001, 0x0, 0x0, 0x200023, 0x0, 0x0, 0x0, 0x0, 0x4000000}) ioctl$TIOCSETA(r4, 0xc1084425, &(0x7f0000000040)={0x4, 0xffffffff, 0x0, 0x8, "210d02000000000000000001008a00", 0x80000000, 0x39fa69e4}) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r5 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x510, r5) sysctl$kern(&(0x7f0000000ac0)={0x0}, 0x0, &(0x7f0000000b00)="7d24b6323837984074b6c2e0200e8f0ddfa4b4470161044b3d5e4dde2f8006e02ff6cd7fd30e954d8af504c2bff17e9805faff6b409f047abfb2f71b54fd81ad6a7fa2b21c44e60aabce115717103c1862361a6fa3a15cf53d9f2d26f0770a5fa02ee0c1f1d4fd9d13fea818ee0b2aa63432491fa06753dc665cbac1362f870abc910759b19d688d85fc909b3edabc1b2fcde6831b3e3be897f3b21e784bf4016e79f4d8ddf2ebba54be1c3aef834c28758d410f4a21e6eae5c44f77a1ef96f58e2692b5f69e3be659", &(0x7f0000000c00)=0xc9, &(0x7f0000000c40)="01fd8043e00db2cb170f4fb2503a4dedc48f291c92d22eb625547982967b5aabbcafa2525558bd437700b7d5820d228baecdd3d927c583c30f27dc42", 0x3c) ioctl$DIOCRADDADDRS(r0, 0xc4504443, &(0x7f00000004c0)={{'./file0\x00', './file0\x00', 0x49, 0xf8}, &(0x7f0000000080)=[{@loopback, '\x00', './file0\x00', 0xfffeffff, 0x8336, 0x18, 0x8, 0x5, 0xbe, 0x5}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xfffffffe, 0x2, 0x0, 0x8, 0x0, 0x5, 0x4}, {@broadcast, '\x00', './file0\x00', 0x297e, 0x2, 0x0, 0x8, 0x3, 0x80, 0x1}], 0x401, 0x3, 0x3, 0x3, 0x4, 0x0, 0x2, 0x6}) setuid(0xee01) socket(0x20, 0x5, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) sendmsg(r6, &(0x7f0000000980)={&(0x7f0000000440)=@un=@abs={0x40, 0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0xffff, 0x1, "fd7e"}], 0x10}, 0x0) 95.795824ms ago: executing program 2 (id=3): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc0) rename(&(0x7f0000000100)='./file2/file0\x00', &(0x7f0000000140)='./file0\x00') ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0x3, 0x3a) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) lchown(&(0x7f0000000280)='./file0/../file0\x00', 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, 0x0) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[]) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xfdffffff, 0x5, {0xb795, 0x3}}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x80084905, &(0x7f0000000380)={'tap', 0x0}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000040)=0x4, 0x4) listen(r2, 0x2dc) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0xd1) recvmmsg(r4, &(0x7f0000000bc0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x5}, 0x38, 0x2000, 0x0) ioctl$WSDISPLAYIO_DELSCREEN(r4, 0x80085754, &(0x7f0000000100)={0x0, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r4, 0xc01864c2, &(0x7f0000000180)={0x0, 0x1, r4, 0x0, 0x8}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mquery(&(0x7f0000ff4000/0x1000)=nil, 0x7ed841f1e000, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1a}, 0x4, 0x0, 0x0, &(0x7f0000000040)="4873dc1d1cf1501890a46d79b0be65e688d9e47790a59ca9e530c95e654d730ddb5c8bcb18a279099f1987f038ce84e517dbb741ede2d34cd6ab83850fdd159647f232929eee9445f0ba24c58b11373880b1df376ecf767f36b289f337f26c9d760604887b4a3ccb5801489f5bd69fe43a128e64932b76638cf30c5ace5dd914811d05ba35f39084f2075bf7257446f8b07872f9d411dc5eabc1001ddbad500a40ee807eb84f3e", 0xa7) 94.956455ms ago: executing program 5 (id=6): r0 = socket$inet(0x2, 0x3, 0x2) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xd27d43220c7fd9f, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r1, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCIMMEDIATE(r4, 0x80044270, &(0x7f0000000000)=0x2) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) r5 = semget$private(0x0, 0x4, 0x20) semop(r5, &(0x7f0000000040)=[{0x0, 0x29, 0x1800}, {0x0, 0xfffd, 0x1800}, {0x2, 0x6a7, 0x1800}, {0x3, 0xf, 0x1800}, {0x1, 0x0, 0x1000}], 0x5) syz_extract_tcp_res(0x0, 0x6, 0xf2) r6 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = kqueue() sendmsg$unix(r7, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={0x18, 0xffff, 0x1, [0xffffffffffffffff, r8, r6]}], 0x18, 0x40b}, 0x600) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @random="b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1, 0x1c, 0xfffd, 0x0, 0x7, 0x1, 0x0, @rand_addr=0x5bf70c0e, @multicast1}, @icmp=@info_request={0xf, 0x0, 0x0, 0x3, 0x800}}}}}) write(r3, &(0x7f0000000080)="0700000000000000000100000000", 0xf802) getsockopt(r0, 0x0, 0x7, 0x0, 0x0) poll(&(0x7f0000000140)=[{r0, 0x10}, {r2, 0x10}, {r4, 0x80}, {r0, 0x2}], 0x4, 0x80) 90.701628ms ago: executing program 6 (id=7): setgid(0xffffffffffffffff) setgroups(0x0, 0x0) chmod(&(0x7f0000000080)='.\x00', 0x142) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$DIOCGETRULESET(r0, 0xc444443b, &(0x7f0000000440)={0xffffffff, './file0\x00', './file0\x00'}) setuid(0xffffffffffffffff) rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='.\x00') 0s ago: executing program 1 (id=9): r0 = open(&(0x7f0000000380)='./file0\x00', 0x8000, 0x4ebfac6bbaf79e5) preadv(r0, &(0x7f0000002400), 0x3, 0x3) (async, rerun: 64) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) (rerun: 64) getgroups(0x1, &(0x7f00000000c0)=[0x0]) fchown(r0, r2, r3) (async) chown(&(0x7f0000000100)='./file0/file0\x00', r1, r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. kernel: protection fault trap, code=0 Stopped at in_ifdetach+0x67: movzbl 0x1(%rax),%r12d ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> show kasan No such command ddb> trace in_ifdetach(ffff8000015d5800) at in_ifdetach+0x67 if_detach(ffff8000015d5800) at if_detach+0x322 tun_clone_destroy(ffff8000015d5800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a84d650) at if_clone_destroy+0x1d5 tun_dev_close(5d04,7) at tun_dev_close+0x1d9 spec_close(ffff80002a84d710) at spec_close+0x417 VOP_CLOSE(fffff600717572b0,7,fffff60007ffd5b0,ffff80002a7379f8) at VOP_CLOSE+0x129 vn_closefile(fffff6006c480c40,ffff80002a7379f8) at vn_closefile+0x11d fdrop(fffff6006c480c40,ffff80002a7379f8) at fdrop+0x121 closef(fffff6006c480c40,ffff80002a7379f8) at closef+0x190 fdfree(ffff80002a7379f8) at fdfree+0x115 exit1(ffff80002a7379f8,43,0,1) at exit1+0x595 sys_exit(ffff80002a7379f8,ffff80002a84da70,ffff80002a84d9c0) at sys_exit+0x1a syscall(ffff80002a84da70) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x767e399354a0, count: -15 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002a84d540 rbx 0xffff8000015e8f00 rdx 0 rcx 0xa472ca1c390bd29e rax 0xdeadbeefdeadbeef r8 0xffffffffffffffff r9 0 r10 0xcb3b88a1a3d77b83 r11 0x56b9c244babe9a4c r12 0x8 r13 0xffff8000015d5848 r14 0xffff8000015d5800 r15 0xdead0036deadbeef rip 0xffffffff82166237 in_ifdetach+0x67 cs 0x8 rflags 0x10286 __ALIGN_SIZE+0xf286 rsp 0xffff80002a84d4f0 ss 0x10 in_ifdetach+0x67: movzbl 0x1(%rax),%r12d ddb> show proc PROC (syz-executor) tid=328152 pid=4986 tcnt=0 stat=onproc flags process=a proc=2000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a736f98,0xffff80002a736018 process=0xffff80002a7a6450 user=0xffff80002a848000, vmspace=0xfffff600719fd008 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 87900 289417 13895 0 3 0 0x80 nanoslp syz-executor 87900 410955 13895 0 3 0 0x4000080 semwait syz-executor 87900 505013 13895 0 3 0 0x4000080 fsleep syz-executor 47384 471778 4567 0 3 0 0x80 nanoslp syz-executor 47384 289148 4567 0 3 0 0x4000080 kqsel syz-executor 47384 154121 4567 0 3 0 0x4000080 fsleep syz-executor 56914 485362 139 0 3 0x2 0x80 piperd syz-executor 59362 123726 139 0 3 0x2 0x80 piperd syz-executor 13895 362972 139 0 3 0x2 0x80 nanoslp syz-executor 88248 53242 139 0 3 0x2 0x80 piperd syz-executor 27673 229836 139 0 3 0x2 0x80 piperd syz-executor 67575 56565 139 0 3 0x2 0x80 piperd syz-executor 4567 180681 139 0 3 0x2 0x80 nanoslp syz-executor 139 215032 80182 0 3 0x2 0x80 wait syz-executor 80182 10841 26719 0 3 0x100002 0x88 sigsusp ksh 26719 425293 49704 0 3 0x10 0x88 kqread sshd-session 49704 477754 39380 0 3 0x12 0x80 kqread sshd-session 49608 345750 1 0 3 0x100003 0x80 ttyin getty 39380 30246 1 0 3 0 0x88 kqread sshd 18268 490203 78786 73 3 0x1100010 0x80 kqread syslogd 78786 238024 1 0 3 0x100002 0x80 sbwait syslogd 83628 298785 1 0 3 0x100000 0x80 kqread resolvd 78249 275047 10419 77 3 0x100012 0x80 kqread dhcpleased 20662 410643 10419 77 3 0x100012 0x80 kqread dhcpleased 10419 297502 1 0 3 0 0x80 kqread dhcpleased 68495 447505 0 0 3 0x14000 0x200 bored smr 18784 356473 0 0 3 0x14000 0x200 pgzero zerothread 59421 224499 0 0 3 0x14000 0x200 aiodoned aiodoned 30852 33956 0 0 3 0x14000 0x200 syncer update 11599 376392 0 0 3 0x14000 0x200 cleaner cleaner 67342 453428 0 0 3 0x14000 0x200 reaper reaper 19767 22535 0 0 3 0x14000 0x200 pgdaemon pagedaemon 38989 50122 0 0 3 0x14000 0x200 bored viomb 53726 139919 0 0 3 0x14000 0x40000200 acpi0 acpi0 6186 233709 0 0 3 0x14000 0x200 bored softnet0 19776 315259 0 0 3 0x14000 0x200 bored systqmp 25323 292423 0 0 3 0x14000 0x200 bored systq 44343 240830 0 0 3 0x14000 0x40000200 tmoslp softclock 15272 143784 0 0 3 0x14000 0x40000200 idle0 1 516886 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11023 12102K 12118K 166960K 12114 0 pcb 17 12K 12K 166960K 19 0 rtable 237 6K 6K 166960K 352 0 pf 31 13K 13K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 33 17K 17K 166960K 33 0 ioctlops 0 0K 2K 166960K 31 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1289 81K 81K 166960K 1356 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 12 41K 97K 166960K 139 0 proc 59 59K 124K 166960K 497 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 4 0 in_multi 99 6K 6K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 25 122K 122K 166960K 25 0 exec 0 0K 1K 166960K 362 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 175 143K 151K 166960K 2915 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 33 66K 96K 166960K 1229 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 27 2K 2K 166960K 27 0 temp 34 9106K 9113K 166960K 3396 0 kqueue 14 22K 22K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 36 0 33 1 0 1 1 0 8 0 rtentry 136 111 0 1 4 0 4 4 0 8 0 unpcb 144 42 0 27 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 9 0 5 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 inpcb 328 64 0 55 2 0 2 2 0 8 1 nd6 112 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 2 0 0 1 0 1 1 0 8 0 pfstate 384 1 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 semapl 72 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1566 0 103 92 0 92 92 0 8 0 ffsino 256 1566 0 103 92 0 92 92 0 8 0 nchpl 144 1771 0 81 64 0 64 64 0 8 0 vnodes 216 1649 0 0 92 0 92 92 0 8 0 namei 1024 5866 0 5866 3 0 3 3 0 8 3 kstatmem 264 23 0 0 2 0 2 2 0 8 0 scxspl 216 6002 0 6002 4 0 4 4 1 8 4 plimitpl 152 30 0 14 1 0 1 1 0 8 0 sigapl 424 431 0 394 6 0 6 6 0 8 1 knotepl 120 2668 0 2618 2 0 2 2 0 8 0 kqueuepl 184 26 0 13 1 0 1 1 0 8 0 pipepl 304 121 0 94 3 0 3 3 0 8 0 fdescpl 448 418 0 394 5 0 5 5 0 8 1 filepl 120 1452 0 1244 7 0 7 7 0 8 0 lockfpl 104 8 0 6 1 0 1 1 0 8 0 lockfspl 48 5 0 3 1 0 1 1 0 8 0 sessionpl 144 23 0 15 1 0 1 1 0 8 0 pgrppl 48 31 0 15 1 0 1 1 0 8 0 ucredpl 104 83 0 72 1 0 1 1 0 8 0 zombiepl 144 395 0 394 1 0 1 1 0 8 0 processpl 1160 431 0 394 4 0 4 4 0 8 0 procpl 664 446 0 405 5 0 5 5 0 8 0 sockpl 552 143 0 116 3 0 3 3 0 8 0 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2466 0 2413 14 0 14 14 0 8 5 mcl2k 2048 111 0 111 1 0 1 1 0 8 1 mextrefs 64 35 0 35 1 0 1 1 0 8 1 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 4244 0 4124 16 0 16 16 0 8 6 bufpl 272 2236 0 102 143 0 143 143 0 8 0 anonpl 24 79924 0 77193 21 0 21 21 0 187 1 amapchunkpl 152 7863 0 7346 23 0 23 23 0 158 1 amappl16 200 1176 0 1163 4 0 4 4 0 8 3 amappl15 192 3 0 3 1 0 1 1 0 8 1 amappl14 184 405 0 404 1 0 1 1 0 8 0 amappl13 176 115 0 105 1 0 1 1 0 8 0 amappl12 168 655 0 631 2 0 2 2 0 8 0 amappl11 160 11 0 11 1 0 1 1 0 8 1 amappl10 152 57 0 47 1 0 1 1 0 8 0 amappl9 144 272 0 272 1 0 1 1 0 8 1 amappl8 136 90 0 89 1 0 1 1 0 8 0 amappl7 128 160 0 149 1 0 1 1 0 8 0 amappl6 120 149 0 148 1 0 1 1 0 8 0 amappl5 112 98 0 90 1 0 1 1 0 8 0 amappl4 104 260 0 246 1 0 1 1 0 8 0 amappl3 96 1375 0 1315 3 0 3 3 0 8 0 amappl2 88 534 0 470 2 0 2 2 0 8 0 amappl1 80 10035 0 9502 13 0 13 13 0 8 0 amappl 88 2234 0 2121 4 0 4 4 0 92 0 uvmvnodes 80 96 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 418 0 394 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 418 0 394 1 0 1 1 0 8 0 vmmpekpl 168 5450 0 5416 2 0 2 2 0 8 0 vmmpepl 168 36026 0 34540 79 0 79 79 0 357 3 vmsppl 368 417 0 394 4 0 4 4 0 8 1 rwobjpl 40 13446 0 12578 11 0 11 11 0 8 1 pdppl 4096 842 0 788 96 14 82 82 0 8 28 pvpl 32 198411 0 191202 70 0 70 70 0 265 1 pmappl 216 417 0 394 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 505 0 14 15 0 15 15 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace in_ifdetach(ffff8000015d5800) at in_ifdetach+0x67 if_detach(ffff8000015d5800) at if_detach+0x322 tun_clone_destroy(ffff8000015d5800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a84d650) at if_clone_destroy+0x1d5 tun_dev_close(5d04,7) at tun_dev_close+0x1d9 spec_close(ffff80002a84d710) at spec_close+0x417 VOP_CLOSE(fffff600717572b0,7,fffff60007ffd5b0,ffff80002a7379f8) at VOP_CLOSE+0x129 vn_closefile(fffff6006c480c40,ffff80002a7379f8) at vn_closefile+0x11d fdrop(fffff6006c480c40,ffff80002a7379f8) at fdrop+0x121 closef(fffff6006c480c40,ffff80002a7379f8) at closef+0x190 fdfree(ffff80002a7379f8) at fdfree+0x115 exit1(ffff80002a7379f8,43,0,1) at exit1+0x595 sys_exit(ffff80002a7379f8,ffff80002a84da70,ffff80002a84d9c0) at sys_exit+0x1a syscall(ffff80002a84da70) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x767e399354a0, count: -15 ddb> machine ddbcpu 1 No such command ddb> trace in_ifdetach(ffff8000015d5800) at in_ifdetach+0x67 if_detach(ffff8000015d5800) at if_detach+0x322 tun_clone_destroy(ffff8000015d5800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a84d650) at if_clone_destroy+0x1d5 tun_dev_close(5d04,7) at tun_dev_close+0x1d9 spec_close(ffff80002a84d710) at spec_close+0x417 VOP_CLOSE(fffff600717572b0,7,fffff60007ffd5b0,ffff80002a7379f8) at VOP_CLOSE+0x129 vn_closefile(fffff6006c480c40,ffff80002a7379f8) at vn_closefile+0x11d fdrop(fffff6006c480c40,ffff80002a7379f8) at fdrop+0x121 closef(fffff6006c480c40,ffff80002a7379f8) at closef+0x190 fdfree(ffff80002a7379f8) at fdfree+0x115 exit1(ffff80002a7379f8,43,0,1) at exit1+0x595 sys_exit(ffff80002a7379f8,ffff80002a84da70,ffff80002a84d9c0) at sys_exit+0x1a syscall(ffff80002a84da70) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x767e399354a0, count: -15