last executing test programs: 38.663077748s ago: executing program 3 (id=234): socket$inet6_tcp(0x1c, 0x1, 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x3, 0x0, 0xffffffffffffffe5}) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DIOCNATLOOK(r0, 0x4004667f, 0x0) 38.622327867s ago: executing program 3 (id=236): r0 = open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) flock(r0, 0x1) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) flock(r1, 0x6) 38.287715202s ago: executing program 3 (id=239): open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400004002c2, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) rfork(0x3000) truncate(&(0x7f0000000140)='./file0\x00', 0x1000000008) 38.203637212s ago: executing program 3 (id=241): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x1f, 0x0) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYRES16], 0x401, 0x0) msgrcv(r0, 0x0, 0xfffffd9a, 0x0, 0x0) 38.138247349s ago: executing program 3 (id=242): setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) freebsd11_mknod(&(0x7f0000000000)='./file0\x00', 0x672cda28f543e327, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 38.014034595s ago: executing program 3 (id=246): r0 = socket$unix(0x1, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x48) bind$unix(r0, &(0x7f0000000040)=@file={0xa, 0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa) 38.002458907s ago: executing program 32 (id=246): r0 = socket$unix(0x1, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x48) bind$unix(r0, &(0x7f0000000040)=@file={0xa, 0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000000)=@file={0xa, 0x1, './file0\x00'}, 0xa) 26.061373974s ago: executing program 2 (id=539): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="27d5dabd", 0x4}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) chflags(&(0x7f0000000280)='./file0\x00', 0x4) sync() 25.899610907s ago: executing program 2 (id=544): open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0xfa6e}, 0x37a}}, {{0x78, 0x1c, 0x0, 0x81, @remote={0xfe, 0x80, '\x00', 0x0}, 0x4}}}, 0x108) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysarch$I386_GET_LDT(0x0, &(0x7f0000000140)={0x0, 0x0}) 25.809986251s ago: executing program 2 (id=549): readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="c8", 0x1}], 0x1, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 25.750494449s ago: executing program 2 (id=550): r0 = socket$inet6(0x1c, 0x1, 0x0) setsockopt(r0, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @loopback={0x4}, 0x2}, 0x1c) r1 = socket(0x1c, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @empty}, 0x1c) 25.63223091s ago: executing program 2 (id=551): setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) freebsd11_mknod(&(0x7f0000000000)='./file0\x00', 0x672cda28f543e327, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 25.601415492s ago: executing program 2 (id=560): rfork(0x1000) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) ioctl$MDIOCQUERY(0xffffffffffffffff, 0xc1c06d02, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x100, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x81, 0x0, 0x40, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0xd6df65, 0xfffffffc, 0x0, 0x0, 0x5, 0x73, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x396, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401, 0x101]}) lio_listio(0x1, &(0x7f0000000580)=[{0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0, [0xffffffff, 0x3], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_ptr, @ke_flags=0x54}}, {0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_ptr}}, {0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffc, 0x0}, {0x0, 0xa, @sigval_ptr=0x81}}], 0x3, 0x0) 25.567286509s ago: executing program 33 (id=560): rfork(0x1000) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) ioctl$MDIOCQUERY(0xffffffffffffffff, 0xc1c06d02, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x100, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x81, 0x0, 0x40, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0xd6df65, 0xfffffffc, 0x0, 0x0, 0x5, 0x73, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x396, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401, 0x101]}) lio_listio(0x1, &(0x7f0000000580)=[{0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0, [0xffffffff, 0x3], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_ptr, @ke_flags=0x54}}, {0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_ptr}}, {0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffc, 0x0}, {0x0, 0xa, @sigval_ptr=0x81}}], 0x3, 0x0) 17.634111053s ago: executing program 4 (id=805): ioctl$MDIOCQUERY(0xffffffffffffffff, 0xc1c06d02, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff0, 0x2400, 0xa38, 0x2, 0x3, 0x8, 0x0, [0xc, 0xfffffff8, 0xfffffffe, 0x8, 0x1, 0x6, 0x4, 0x2, 0x202, 0x0, 0x1, 0x3, 0x7, 0xfffffff7, 0x7, 0x3, 0xe, 0x8, 0x8, 0x3cfb, 0x2764, 0xa00, 0x0, 0x90, 0x3, 0x7, 0xb4, 0xffff, 0x0, 0x4, 0xffffffda, 0x3, 0x5, 0x539, 0x200, 0x2, 0xfffffffe, 0xdd, 0x4afb2fe4, 0xb, 0x9, 0x6, 0xff, 0x7, 0x3, 0x8001, 0x5, 0x100, 0x3, 0x5, 0xdd8, 0x0, 0xfffffff9, 0x6, 0xaf6, 0xe, 0x3b5, 0x7, 0x4, 0x80000000, 0xa941, 0x10000, 0x0, 0x10, 0xfe6, 0x3, 0x3, 0xc, 0xe6b, 0x0, 0x2, 0x65, 0x3, 0x81, 0x4, 0x7, 0xfffffffb, 0x1, 0xd15c, 0x0, 0x8001, 0x2, 0x5, 0x8, 0x6, 0x4, 0x2, 0x5, 0x401, 0x1, 0x6, 0xfffffff3, 0x0, 0x6, 0xffffffff, 0x4]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x4000}], 0x1) execve(0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x46}], 0x860, 0x0, 0x0, 0x0) 17.430301063s ago: executing program 4 (id=809): r0 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0xffffffff, @loopback, 0xd}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="0000000000114b70380dbb00086000"}, 0x1c) r1 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @rand_addr="ff070a791b4375202b5c2baf2781e604"}, 0x1c) 17.358783508s ago: executing program 4 (id=810): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) aio_write(&(0x7f0000000680)={r1, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sigval_int, @thr={0x0, 0x0}}}) aio_write(&(0x7f0000000240)={r0, 0x80000003, &(0x7f0000000040)="e2", 0xfffffe6a, [0x20, 0x4000], 0x10, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0xfffffffc, @sival_int, @ke_flags=0xc088}}) aio_fsync(0x80, &(0x7f0000000400)={r0, 0x8000df, 0x0, 0x0, [0x6, 0x3], 0x100000000, 0x20, 0xfffffffc, {0x932, 0x497, 0x0}, {0x0, 0x20, @sigval_int=0x7}}) 17.00898914s ago: executing program 4 (id=816): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) msync(&(0x7f0000860000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) mprotect(&(0x7f0000d9c000/0x4000)=nil, 0x4000, 0x2) 16.689632735s ago: executing program 4 (id=817): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000700)='./file0\x00', r0, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0xe109, 0x0) 16.460868031s ago: executing program 4 (id=823): r0 = socket$inet6(0x1c, 0x3, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x9, &(0x7f0000000040)={@local={0xac, 0x14, 0x0}, @multicast1}, 0xfdba) getsockopt$inet_mreqn(r1, 0x0, 0x9, &(0x7f0000000000)={@loopback, @multicast2, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000140)={@loopback={0x14}, r2}, 0x14) 16.446271351s ago: executing program 34 (id=823): r0 = socket$inet6(0x1c, 0x3, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x9, &(0x7f0000000040)={@local={0xac, 0x14, 0x0}, @multicast1}, 0xfdba) getsockopt$inet_mreqn(r1, 0x0, 0x9, &(0x7f0000000000)={@loopback, @multicast2, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000140)={@loopback={0x14}, r2}, 0x14) 5.418770094s ago: executing program 5 (id=1023): r0 = socket(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x2, &(0x7f0000000300)="3e7cbf4e", 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, 0x0, 0x0) 5.414920313s ago: executing program 5 (id=1024): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x2, 0x2, @rand_addr=0x5}, 0x10) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x3, 0x0, 0xffffffffffffffe5}) open(0x0, 0x615, 0x0) r0 = open(0x0, 0x205, 0x0) fcntl$lock(r0, 0x9, 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x0, 0x0}) 5.397940214s ago: executing program 5 (id=1025): kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10000410, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00003e7000/0x3000)=nil, 0x3000, 0x5) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x101, 0x4}, {0x958, 0x1}}, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 5.381227678s ago: executing program 5 (id=1027): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r0, 0x0) freebsd10_pipe(&(0x7f0000000140)={0xffffffffffffffff}) close(r1) accept4(r0, 0x0, 0x0, 0x0) flock(r1, 0x8) 4.494602318s ago: executing program 5 (id=1052): r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) mknodat(r0, &(0x7f0000000040)='./file0/file0\x00', 0xe004, 0x0) chown(&(0x7f0000000240)='./file0/file0/file0\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x0) freebsd11_stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) 4.485796889s ago: executing program 5 (id=1055): open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r0 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) poll(&(0x7f0000000300)=[{r0, 0x2000}], 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000)=[{0x3, 0xfffffffffffffffe, 0x80c3}], 0x1, 0x0, 0x0, 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') 4.437869956s ago: executing program 35 (id=1055): open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r0 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) poll(&(0x7f0000000300)=[{r0, 0x2000}], 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000)=[{0x3, 0xfffffffffffffffe, 0x80c3}], 0x1, 0x0, 0x0, 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') 1.810140367s ago: executing program 7 (id=1117): r0 = kqueue() kevent(r0, &(0x7f0000000380)=[{0x7fffffffffffffff, 0xfffffffffffffffa, 0x1, 0x1, 0x101, 0x3, [0x5, 0x5, 0x7fffffffffffffff, 0x5282aee3]}], 0x1, 0x0, 0x0, 0x0) fork() fork() r1 = kqueue() kevent(r1, &(0x7f0000000040), 0xa1ba, 0x0, 0x1c0, 0x0) rfork(0x85000) 1.701052358s ago: executing program 7 (id=1118): r0 = socket(0x26, 0x2, 0x0) r1 = socket(0x26, 0x2, 0x0) bind(r1, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc) r2 = socket(0x26, 0x2, 0x0) bind(r2, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc) bind(r0, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc) 1.700625898s ago: executing program 7 (id=1119): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2, 0x3}, 0x10) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000340)=0x101, 0x4) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002c00)="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", 0x5ad}], 0x1}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="59d8", 0x2}], 0x1, 0x0, 0x0, 0x20000}, 0x20001) sendmsg$inet_sctp(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000600)="28bbfc2bad40b1175d8f9fda8b7ae70bbb3b4fa6bb1ecc6e27bc78a9faf4e91907c935eaa86852107f65fc0fb911cab753f251cdc8a7c61759b62e79ca2674b81ea4ded0d4a7e9895172a2a5c95c5e97c85be263d25b7a86d967782a00b60a9fd5958a72b5ef3f369ec55dd70d7bd8de60ee68b5e3d2989ef0bb62bebf423957cdbaa44c5f6e778164652571ebf045a1d207c7cd3216b68cb418d6c16975d0ff290322d00eeb631a5b7a61e6eb389a94cdfd981be41b70895abd59ae06d18a6e1c562a9d193da6988c4a2acba11dbd40c9f2acfa0f92ed0d431c2db8a9b79adba9", 0xe1}, {&(0x7f0000000700)="753fafc4ab7751202bcbad2d73b26e865467f6e723e47c33810d623fe4527364aabd9014b46745cdc3c740ad0cb162ed070ed0e28ffb0dbfcc250d3c05e15b40b3ec035ba813798ff1d86b6ac4f1f93413168cca1354282b143ac64e2312751f8b13492d1cfa85dd5b4337ad990e79c2ba497f90cf76c34430a942f18a10b6bfbe46a294471b2f474549aa9329e4c20e6ff37d20afabc47be8a60252d2b0bfff827d1318249330655f6be7b126699951e10a17375492de175dec1455328f83ef56e9117e4f48fb7edbbba8af14508c8c9e72d2a9a4f42719", 0xd8}, {&(0x7f0000000800)="03e5477104cc298a401a5aa5bdfea3804b83244913f4cb6705d263d6d43cab96bc42e49942d45f5605c114000a33ae0bf7b6b03496891256f91e1b5962c7ee22600a2dca4378488e3565bbd62be3d8095a36be3147df2b724bf1ec68f7a39d8155c018472d872d732906591dd14a8ebda99203fc97fa05f805d78f05c0e40916b2548a741d341506feb97bf9ec", 0x8d}, {&(0x7f0000000400)="0810fe30ffc7e1812d73a8585cdee2256069963927036c60dd1f6f514ebf17b5fe2cdab771dd8bb5ca50bfc4293b2e63b25c5ecf6a77c203fd86acbb7e8db25e", 0x40}, {&(0x7f0000000440)="7d87a748956ccf520dfa8cd423055604396df8cb9468aaf637a874bc84dcb014f2564bd1", 0x24}, {&(0x7f00000008c0)="c872fb34e55a7e449fc2427cdea8706e01cb34946762edf24dfc54d765c87bfb7c1865ff38fb4d052870a8816c4dcb6bf8d4c1c4814c68c30ab1cb598bec0a1e98d6697f03ad35fad8804381ed2db2747f02459a6283f05da249af5ee8d2e8f3be69dcfc6e4626b1605c4b8486c3ff961cb80a1560dd4a476d1356c0753ab6463412c688e56a66a292dc72d7aac9a47c28af318c91378a64c210c9852bfc29e236ae7afa6ef9245a8463dbbd57f53595b8751b231f8f3112cb834035d34ef0d82c2e1d74cc53bae0881a6a5ee1e65dddca4eb502a69927a35693e280038c1751afd7cfb953", 0xe5}, {&(0x7f00000009c0)="bb43089af176b1675430683ec481bd14cfc6f4b6785b63df6e3b6851b7ad0fed66d3b19dee65b705140fb744df79846306ae3235fafe581c337db4db96ba359db14d7fd2ea7dec0f2ce278d0e6e921b79e7951b398a4a25e4a1032aed9d67ff747f908b56a093c", 0x67}, {&(0x7f0000000580)="b12528b3c28586651fb55497d1a69c9891c928656837", 0x16}, {&(0x7f0000001b80)="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", 0x19a}], 0x9}, 0x4) 1.648967967s ago: executing program 7 (id=1120): open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) r1 = vfork() r2 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x1000301810005}) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1000300010005, r1}) 788.922748ms ago: executing program 0 (id=1137): procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) __semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x0) freebsd11_lstat(0x0, &(0x7f0000000380)) r0 = vfork() vfork() lio_listio(0x0, 0x0, 0x0, &(0x7f00000047c0)={0x1, 0xf}) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r0}) 787.33736ms ago: executing program 0 (id=1138): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) posix_fallocate(r0, 0x0, 0x10007) extattr_set_link(0x0, 0x0, 0x0, &(0x7f0000000080)="c18fc680b3c6918deed1673857825ebf44fe4eaff354ae887a4f323487a0d2e80d2649a028cfd533e4de8d937527cf5fbb283d674f84971befb8d9f376d5e7c7", 0x40) freebsd11_getfsstat(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x103, 0x1) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r2, 0x3862) 731.711006ms ago: executing program 0 (id=1139): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xffffffffffffffff) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) chflags(&(0x7f00000000c0)='./file1\x00', 0x1) 731.374869ms ago: executing program 0 (id=1140): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000200)={@multicast1, @rand_addr=0xfffffffd, @multicast1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x48, &(0x7f0000000180)={@multicast1, @multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x49, &(0x7f0000000000)={@multicast1, @multicast1, @multicast1}, 0xc) 693.938866ms ago: executing program 0 (id=1142): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 628.950346ms ago: executing program 6 (id=1143): fork() procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) aio_write(0x0) wait4(0x0, 0x0, 0x0, 0x0) r0 = fork() sigqueue(r0, 0x48, @sival_int=0x5) sigqueue(r0, 0x49, @sigval_int) 579.810282ms ago: executing program 7 (id=1145): r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2, 0x2, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='htcp\x00', 0x5) r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) rfork(0x1000) 468.579071ms ago: executing program 0 (id=1147): r0 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r1 = open$dir(&(0x7f0000000480)='./file0\x00', 0x8201, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{0x3, 0xfffffffffffffffc, 0x80db, 0x0, 0x4, 0x4, [0x10000000000]}], 0x1, 0x0, 0x0, 0x0) kevent(r2, &(0x7f0000000000)=[{0x3, 0xfffffffffffffffc, 0x80c3}], 0x1, 0x0, 0x0, 0x0) close(r1) 451.432217ms ago: executing program 6 (id=1149): r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x40, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x2, @loopback}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2, 0x2, @loopback}, 0x10) sendto(r0, &(0x7f0000000380)="8e7414", 0x3, 0x20005, 0x0, 0x0) getsockopt$inet_udplite(r0, 0x88, 0x4, &(0x7f0000000080), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00'}, 0x24) 319.856285ms ago: executing program 6 (id=1150): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0xa, 0x1, './file0\x00'}, 0xa) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x2, 0x4) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f00000000c0)={0x16, 0x23, 0x0, &(0x7f0000001940), 0x0, 0x0, 0x80000000, 0x7d86699a}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000000)={@multicast2, @loopback}, 0x8) getsockopt$inet_buf(r0, 0x0, 0x4a, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) 319.581249ms ago: executing program 1 (id=1151): kqueue() r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r0, 0x4) r1 = kqueue() kevent(r1, &(0x7f00000000c0)=[{0x4, 0xffffffffffffffff, 0x1}, {0x4, 0xffffffffffffffff, 0xc700, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7fff]}], 0x2, &(0x7f00000002c0)=[{}], 0x1, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x20b89, 0x0, 0xffff3955, 0x0) 209.075312ms ago: executing program 6 (id=1152): r0 = socket$inet6(0x1c, 0x2, 0x0) setsockopt(r0, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @rand_addr="fe000000000be722303e8f00", 0x4}, 0x1c) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000080)=0x400b, 0x4) bind$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0xfffffffe, @empty, 0x7}, 0x1c) 208.496971ms ago: executing program 1 (id=1153): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000100)=@in6={0xffffffffffffff95, 0x1c, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x2, 0xfffffffd, @loopback}, 0x1c) r2 = dup2(r0, r1) accept$inet(r2, 0x0, 0x0) 193.550143ms ago: executing program 6 (id=1154): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x2) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) rename(0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0)=[{0x4, 0xfffffffffffffffc, 0x4001, 0x2, 0x2000000004000000, 0x0, [0x0, 0x0, 0x4]}], 0x1, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0) 163.036562ms ago: executing program 1 (id=1155): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mount(0x0, 0x0, 0x0, &(0x7f00000000c0)="35bf33baee71d8a68674a31ee54818dcc65ff6c32c5eb531e6dbe2bc6236d3981e288786f2f9a8a3252db260f999f154315d5f8877175bd785ad4fa995422150afb39d83") setgroups(0x3e, &(0x7f0000000100)) r0 = getegid() r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchownat(r1, &(0x7f0000000280)='./file0\x00', 0x0, r0, 0x0) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0) 162.838433ms ago: executing program 1 (id=1156): open(&(0x7f0000000080)='./file0\x00', 0x200, 0xac) truncate(&(0x7f00000003c0)='./file0\x00', 0x8001) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) sendfile(r0, r2, 0x6, 0x800000000000, 0x0, 0x0, 0x14) execve(0x0, 0x0, 0x0) 162.571111ms ago: executing program 6 (id=1157): r0 = semget$private(0x0, 0x4000000009, 0x222) r1 = semget$private(0x0, 0x2, 0x4a5) select(0x0, 0x0, &(0x7f0000000380)={0x400, 0x4, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, 0x0, 0x0) socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES32=r1, @ANYRES16, @ANYRES64]) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8008426d, 0x0) __semctl$IPC_RMID(r0, 0x0, 0x0) 18.96704ms ago: executing program 1 (id=1158): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000001d40)=[{0x3, 0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0, [0x0, 0x9]}], 0x1, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r1, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') 18.690931ms ago: executing program 1 (id=1159): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="c7acff47", 0x4}], 0x1, 0xffff) r1 = socket(0x1c, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) sendfile(r0, r1, 0x89b9, 0x0, 0x0, 0x0, 0x11) setsockopt$sock_splice(r1, 0xffff, 0x1023, &(0x7f0000000040)={r1, 0x0, {0x1, 0x4}}, 0x20) 0s ago: executing program 7 (id=1160): r0 = socket$inet(0x2, 0x1, 0x6) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) rtprio_thread(0x1, 0x0, &(0x7f0000000000)={0x2}) writev(r1, &(0x7f0000000280), 0x26) rfork(0x3060) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000 Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 vnode_pager_putpages: zero-length write at 0 resid 4 0xfffffe0077c15c08: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83715620 usecount 3, writecount 2, refcount 3 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00549078b8 ref 1 pages 1 cleanbuf 0 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe0054917740 (pid 1439, syz-executor, tid 100765) nlink=1, effnlink=1, size=4, extsize 0 generation=54e1ac45, uid=0, gid=0, flags=0x4 ino 83, on dev gpt/rootfs vnode_pager_putpages: zero-length write at 0 resid 4 0xfffffe0077c14898: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83715620 usecount 3, writecount 2, refcount 3 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005495f000 ref 1 pages 1 cleanbuf 0 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe0054967740 (pid 1497, syz-executor, tid 100833) nlink=1, effnlink=1, size=4, extsize 0 generation=b7ab9899, uid=0, gid=0, flags=0x4 ino 117, on dev gpt/rootfs FreeBSD/amd64 (ci-freebsd-main-8.us-central1-b.c.syzkaller.internal) (ttyu0) login: tap5: Ethernet address: 58:9c:fc:10:ff:fb tap5: link state changed to UP if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000 FreeBSD/amd64 (ci-freebsd-main-8.us-central1-b.c.syzkaller.internal) (ttyu0) login: pid 1652 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large) pid 1815 (syz-executor) is attempting to use unsafe AIO requests - not logging anymore lock order reversal: 1st 0xfffffe0077f2b228 ufs (ufs, lockmgr) @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3386 2nd 0xffffffff83001c40 proctree (proctree, sx) @ /syzkaller/managers/main/kernel/sys/kern/subr_prf.c:189 lock order proctree -> ufs established at: #0 0xffffffff81652e31 at witness_checkorder+0x781 #1 0xffffffff814b94f6 at lockmgr_lock_flags+0x1d6 #2 0xffffffff81d8117b at ffs_lock+0x18b #3 0xffffffff822de26b at VOP_LOCK1_APV+0x6b #4 0xffffffff817b622e at _vn_lock+0x14e #5 0xffffffff817b6ad8 at vn_close1+0x1e8 #6 0xffffffff814aaf6a at ktrops+0x41a #7 0xffffffff814aa6ed at sys_ktrace+0xa7d #8 0xffffffff8212196f at amd64_syscall+0x4af #9 0xffffffff820c638b at fast_syscall_common+0xf8 lock order ufs -> proctree attempted at: #0 0xffffffff81653d02 at witness_checkorder+0x1652 #1 0xffffffff81544b8f at _sx_slock_int+0x13f #2 0xffffffff8161064d at uprintf+0x14d #3 0xffffffff81dad47f at ufs_rmdir+0xdf #4 0xffffffff822dd0b1 at VOP_RMDIR_APV+0xe1 #5 0xffffffff817ab2a7 at kern_frmdirat+0x8a7 #6 0xffffffff8212196f at amd64_syscall+0x4af #7 0xffffffff820c638b at fast_syscall_common+0xf8 tap6: Ethernet address: 58:9c:fc:10:7c:69 tap6: link state changed to UP if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000 pid 1932 (syz-executor), jid 0, uid 0: exited on signal 8 (no core dump - too large) pid 1261 (syz-executor), tap4: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe0059dc7300 is deleted tap4: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800 pid 1046 (syz-executor), tap3: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe0059dc8180 is deleted pid 981 (syz-executor), tap2: tun/tap protocol violation, non-controlling process closed last. if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 ifaddr cache = 0xfffffe0059dc8000 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 FreeBSD/amd64 (ci-freebsd-main-8.us-central1-b.c.syzkaller.internal) (ttyu0) login: if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 tap2: link state changed to DOWN tap3: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f000 pid 2092 (syz-executor), jid 0, uid 0: exited on signal 8 (no core dump - too large) ifaddr cache = 0xfffffe0059dc7600 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 tap5: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4800 tap7: Ethernet address: 58:9c:fc:10:ff:ab tap7: link state changed to UP Accounting disabled if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe4800 Expensive callout(9) function: 0xffffffff81a98cf0(0) 0.011385612 s if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1e800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d1f800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007fe3000 ktrace write failed, errno 27, tracing stopped for pid 2183 ktrace write failed, errno 27, tracing stopped for pid 2105 ktrace write failed, errno 27, tracing stopped for pid 2169 ktrace write failed, errno 27, tracing stopped for pid 2189 ktrace write failed, errno 27, tracing stopped for pid 765 ktrace write failed, errno 27, tracing stopped for pid 2177 ktrace write failed, errno 27, tracing stopped for pid 1833 ktrace write failed, errno 27, tracing stopped for pid 763 ktrace write failed, errno 27, tracing stopped for pid 764 ktrace write failed, errno 27, tracing stopped for pid 1 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d21000 panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:607: callout_cc_add: Bad list head 0xfffffe0007fbb6a8 first->prev != head cpuid = 0 time = 1747316807 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0057351e90 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0057351ff0 vpanic() at vpanic+0x257/frame 0xfffffe00573521b0 panic() at panic+0xb5/frame 0xfffffe0057352270 callout_cc_add() at callout_cc_add+0x339/frame 0xfffffe00573522d0 callout_reset_sbt_on() at callout_reset_sbt_on+0x74f/frame 0xfffffe00573523f0 tcp_timer_activate() at tcp_timer_activate+0x56c/frame 0xfffffe0057352470 tcp_do_segment() at tcp_do_segment+0x3f4f/frame 0xfffffe0057352750 tcp_input_with_port() at tcp_input_with_port+0x2214/frame 0xfffffe0057352a20 tcp6_input_with_port() at tcp6_input_with_port+0xeb/frame 0xfffffe0057352a60 tcp6_input() at tcp6_input+0x26/frame 0xfffffe0057352a90 ip6_input() at ip6_input+0x2285/frame 0xfffffe0057352cf0 swi_net() at swi_net+0x2b8/frame 0xfffffe0057352d90 ithread_loop() at ithread_loop+0x4ec/frame 0xfffffe0057352ef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0057352f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0057352f30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 12 tid 100033 ] Stopped at kdb_enter+0x6e: movq $0,0x25bda37(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0 rax 0x12 rcx 0xfffffe00033eee30 rdx 0 rbx 0xffffffff827b0020 .str.27 rsp 0xfffffe0057351fd0 rbp 0xfffffe0057351ff0 rsi 0 rdi 0xffffffff816145b9 printf+0x149 r8 0 r9 0xffffffff r10 0x929b32bdcf48a2f7 r11 0x4 r12 0xfffffe0008021740 r13 0xfffffffffffffffe r14 0xffffffff827b0020 .str.27 r15 0 rip 0xffffffff815fe75e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25bda37(%rip) db> show proc Process 12 (intr) at 0xfffffe0008008580: state: NORMAL uid: 0 gids: 0 parent: pid 0 at 0xffffffff83b468e0 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b468e0 reapsubtree: 12 sigparent: 20 vmspace: 0xffffffff83b47880 (map 0xffffffff83b47880) (map.pmap 0xffffffff83b47920) (pmap 0xffffffff83b47990) threads: 20 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 Run CPU 0 [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] db> ps pid ppid pgrp uid state wmesg wchan cmd 2234 2105 2105 0 R CPU 1 syz-executor 2233 765 765 0 R (threaded) syz-executor 100812 RunQ syz-executor 101675 RunQ syz-executor 2230 1833 1833 0 R (threaded) syz-executor 101413 RunQ syz-executor 101670 S select 0xfffffe006eb4fcc0 syz-executor 101672 S uwait 0xfffffe007af31b80 syz-executor 2221 764 764 0 R (threaded) syz-executor 101347 RunQ syz-executor 101657 RunQ syz-executor 101661 S uwait 0xfffffe0077f03380 syz-executor 101663 D ufs 0xfffffe006eb71228 syz-executor 101665 S uwait 0xfffffe0007fec300 syz-executor 2217 1 1833 0 S uwait 0xfffffe007af31780 syz-executor 2213 1 765 0 S uwait 0xfffffe0058cf8000 syz-executor 2195 1 765 0 S uwait 0xfffffe0077f03580 syz-executor 2194 1 1833 0 S uwait 0xfffffe0007fec600 syz-executor 2184 1 2105 0 SV lockf 0xfffffe0058e22e00 syz-executor 2180 1 2105 0 S uwait 0xfffffe007af31c80 syz-executor 2179 1 2105 0 S uwait 0xfffffe0058a5c080 syz-executor 2153 1 765 0 S uwait 0xfffffe0077f03280 syz-executor 2105 763 2105 0 S nanslp 0xffffffff83b9d500 syz-executor 2095 1 764 0 S uwait 0xfffffe0058a5c280 syz-executor 2086 1 764 0 S uwait 0xfffffe0058a5bb00 syz-executor 1897 0 0 0 DL mdwait 0xfffffe007d509000 [md2] 1833 763 1833 0 S nanslp 0xffffffff83b9d500 syz-executor 1646 1 1646 0 Ss+ ttyin 0xfffffe0058a974b0 getty 1645 1 1645 0 Ss+ ttyin 0xfffffe0058e28cb0 getty 1644 1 1644 0 Ss+ ttyin 0xfffffe0058e290b0 getty 1643 1 1643 0 Ss+ ttyin 0xfffffe0058a94cb0 getty 1642 1 1642 0 Ss+ ttyin 0xfffffe0058e294b0 getty 1641 1 1641 0 Ss+ ttyin 0xfffffe0058e2a0b0 getty 1640 1 1640 0 Ss+ ttyin 0xfffffe0058e298b0 getty 1639 1 1639 0 Ss+ ttyin 0xfffffe0058e29cb0 getty 1638 1 1638 0 Ss+ ttyin 0xfffffe0058e2a4b0 getty 1381 0 0 0 DL mdwait 0xfffffe007a97f000 [md1] 1286 0 0 0 DL mdwait 0xfffffe007807d000 [md0] 1044 0 0 0 DL (threaded) [KTLS] 100215 D - 0xfffffe0054629500 [thr_0] 100343 D - 0xfffffe0054629580 [thr_1] 100344 D - 0xffffffff83caec28 [reclaim_0] 1015 0 0 0 RL (threaded) [so_splice] 100309 RunQ [thr_0] 100310 D - 0xfffffe0058a5dec0 [thr_1] 920 0 0 0 DL - 0xffffffff83cad400 [soaiod4] 919 0 0 0 DL - 0xffffffff83cad400 [soaiod3] 918 0 0 0 DL - 0xffffffff83cad400 [soaiod2] 917 0 0 0 DL - 0xffffffff83cad400 [soaiod1] 840 0 0 0 DL aiordy 0xfffffe00548f3040 [aiod4] 839 0 0 0 DL aiordy 0xfffffe00548f45c0 [aiod3] 838 0 0 0 DL aiordy 0xfffffe00548f35a0 [aiod2] 837 0 0 0 DL aiordy 0xfffffe005490db00 [aiod1] 765 763 765 0 S nanslp 0xffffffff83b9d500 syz-executor 764 763 764 0 S nanslp 0xffffffff83b9d501 syz-executor 763 761 761 0 S select 0xfffffe0059dab0c0 syz-executor 761 759 761 0 Ss pause 0xfffffe00548e30f0 csh 759 1 759 0 Ss select 0xfffffe00547f9440 sshd 17 0 0 0 DL syncer 0xffffffff83cbada0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0008028040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83cb9360 [bufdaemon] 100081 D - 0xffffffff83002140 [bufspacedaemon-0] 100094 D sdflush 0xfffffe0058e36ce8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d04380 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100078 D psleep 0xffffffff83cea2f8 [dom0] 100084 D launds 0xffffffff83cea304 [laundry: dom0] 100085 D umarcl 0xffffffff81dcf0c0 [uma] 7 0 0 0 DL - 0xffffffff8391acd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff84643850 [pf purge] 5 0 0 0 DL waiting 0xffffffff844b7700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff838e5340 [doneq0] 100047 D - 0xffffffff838e52c0 [async] 100076 D - 0xffffffff838e5140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ce5b40 [crypto] 100044 D crypto_ 0xfffffe0058555030 [crypto returns 0] 100045 D crypto_ 0xfffffe0058555080 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe00547d9088 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b45f00 [g_event] 100038 D - 0xffffffff83b45f20 [g_up] 100039 D - 0xffffffff83b45f40 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 RL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 Run CPU 0 [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0008009040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce65e0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c2cff0 [swapper] 100005 D - 0xfffffe005462a000 [softirq_0] 100006 D - 0xfffffe0054629e00 [softirq_1] 100007 D - 0xfffffe0054629d00 [if_io_tqg_0] 100008 D - 0xfffffe0054629c00 [if_io_tqg_1] 100009 D - 0xfffffe0054629b00 [if_config_tqg_0] 100010 D - 0xfffffe0007f66200 [kqueue_ctx taskq] 100011 D - 0xfffffe0007f66100 [jail_remove taskq] 100012 D - 0xfffffe0007f66000 [bus taskq] 100015 D - 0xfffffe0007f65c00 [thread taskq] 100017 D - 0xfffffe0007f65a00 [aiod_kick taskq] 100018 D - 0xfffffe0007f65900 [deferred_unmount ta] 100019 D - 0xfffffe0007f65800 [inm_free taskq] 100020 D - 0xfffffe0007f65700 [in6m_free taskq] 100021 D - 0xfffffe0007f65600 [linuxkpi_irq_wq] 100022 D - 0xfffffe0007f65500 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0007f65500 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0007f65500 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0007f65500 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0007f65400 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0007f65400 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0007f65400 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0007f65400 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0007f65300 [firmware taskq] 100041 D - 0xfffffe0007f65100 [crypto_0] 100042 D - 0xfffffe0007f65100 [crypto_1] 100057 D - 0xfffffe0007f64e00 [vtnet0 rxq 0] 100058 D - 0xfffffe0007f64d00 [vtnet0 txq 0] 100059 D - 0xfffffe0007f64c00 [vtnet0 rxq 1] 100060 D - 0xfffffe0007f64b00 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe005856cd00 [virtio_balloon] 100066 D - 0xffffffff827b5360 [deadlkres] 100070 D - 0xfffffe0059be2000 [acpi_task_0] 100071 D - 0xfffffe0059be2000 [acpi_task_1] 100072 D - 0xfffffe0059be2000 [acpi_task_2] 100074 D - 0xfffffe0007f66b00 [mca taskq] 100075 D - 0xfffffe0007f65000 [CAM taskq] 100077 D - 0xfffffe0007f64a00 [ipsec_offload] db> show all locks Process 2234 (syz-executor) thread 0xfffffe0054965740 (101041) shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe0054905bc8) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4993 Process 2221 (syz-executor) thread 0xfffffe0054991000 (101657) exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe000866df20) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:1752 exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe000865da20) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:4023 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006eb71228) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_vnops.c:1229 Process 1015 (so_splice) thread 0xfffffe005491c000 (100309) exclusive sx so_rcv_sx (so_rcv_sx) r = 0 (0xfffffe005a0d15c0) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:4844 exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffffe005a0d1580) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:4838 Process 12 (intr) thread 0xfffffe0008021740 (100033) exclusive sleep mutex so_snd (so_snd) r = 0 (0xfffffe005a0d15a0) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_input.c:2986 exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe0077d6a020) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:1471 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 376 5063K 508 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4216 sysctloid 35104 2068K 35179 vtbuf 24 1968K 46 kobj 331 1324K 522 newblk 43 1035K 7436 vfscache 3 1025K 3 pcb 51 697K 307 inodedep 25 521K 2054 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 205 298K 2384 filedesc 37 293K 2651 vmem 5 272K 7 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 244747 acpica 1674 184K 54426 tidhash 3 141K 3 pagedep 15 132K 1330 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 116 116K 141 sem 4 106K 4 gtaskqueue 18 98K 18 bus 997 82K 5063 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 521 66K 521 ddb_capture 1 64K 1 umtx 464 58K 464 kdtrace 273 57K 3912 temp 53 40K 2518 shm 2 34K 21 DEVFS3 135 34K 145 hostcache 1 32K 1 msg 4 30K 4 kbdmux 6 28K 6 routetbl 364 27K 1008 LRO 26 27K 34 ifaddr 95 23K 105 ifnet 11 21K 12 lltable 66 20K 83 DEVFS_RULE 56 20K 56 ufs_mount 4 17K 5 proc 3 17K 3 filemon 2 16K 21 tty 16 16K 16 ithread 90 15K 90 bus-sc 34 15K 1647 GEOM 82 14K 584 eventhandler 163 14K 163 shmfd 13 14K 33 ether_multi 152 13K 333 sctp_stro 12 12K 37 md_disk 3 12K 5 kenv 95 12K 95 CAM queue 5 11K 1528 sctp_atcl 26 10K 146 rman 82 10K 437 rpc 8 9K 8 in6_multi 65 9K 109 bmsafemap 3 9K 1931 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 9 pfs_vncache 1 8K 1 audit_evclass 239 8K 301 taskqueue 69 8K 123 plimit 17 7K 671 kqueue 64 7K 2483 sglist 6 7K 6 cred 24 6K 312 CAM DEV 3 6K 510 pf_ifnet 17 6K 35 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 24 UMA 268 5K 268 sctp_timw 17 5K 17 vt 11 5K 11 pf_table 2 4K 6 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 freework 16 4K 2624 pwddesc 61 4K 2330 acpisem 28 4K 28 tun 8 3K 8 terminal 11 3K 11 DEVFSP 44 3K 166 lockf 25 3K 480 acpidev 20 3K 20 uidinfo 4 3K 28 hhook 8 3K 10 clone 9 3K 10 kcovinfo 36 3K 72 sctp_ifa 17 3K 22 ip6ndp 16 3K 22 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 proc-args 64 2K 3475 dirrem 7 2K 1793 Unitno 28 2K 1468 sctp_atky 38 2K 200 CAM XPT 22 2K 543 in_multi 6 2K 24 selfd 24 2K 239744 toponodes 6 2K 6 session 12 2K 66 ipsecpolicy 2 2K 2 newdirblk 10 2K 1286 mld 10 2K 10 igmp 10 2K 10 BPF 10 2K 39 msi 9 2K 9 netlink 2 2K 165 sctp_stri 2 1K 36 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 CC Mem 8 1K 205 nhops 6 1K 12 vnodemarker 2 1K 40 NFSD session 1 1K 1 diradd 7 1K 1822 CAM periph 4 1K 271 ip6opt 6 1K 99 ipsec 3 1K 3 sctp_ifn 6 1K 22 mkdir 6 1K 2572 freefile 6 1K 1702 freeblks 3 1K 1535 indirdep 3 1K 1248 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 814 pci_link 10 1K 10 iov 11 1K 32510 osd 13 1K 224 crypto 4 1K 40 encap_export_host 12 1K 12 cdev 2 1K 2 lkpikmalloc 8 1K 9 sctp_athm 26 1K 161 sctp_map 24 1K 72 inpcbpolicy 12 1K 640 chacha20random 1 1K 1 biobuf 1 1K 1 select 3 1K 93 sctp_aadr 5 1K 7 ip_msource 5 1K 30 vnodes 1 1K 28 ktls 1 1K 14 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 pf_rule 1 1K 3 cryptodev 2 1K 139 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 VN POLL 1 1K 43 aio 4 1K 7 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 sctp_vrf 1 1K 1 ip6_msource 1 1K 38 vnet 1 1K 1 pmc 1 1K 1 sigio 1 1K 8 entropy 2 1K 38 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 soname 1 1K 3846 p1003.1b 1 1K 1 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 tcp_pcm_rack 0 0K 18 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 36 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 mqdata 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 22 sctp_iter 0 0K 25 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 25 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 2 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 749 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 20 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 351 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 3 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6_moptions 0 0K 22 in6_mfilter 0 0K 68 frag6 0 0K 57 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_moptions 0 0K 42 in_mfilter 0 0K 74 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 19 fadvise 0 0K 3 statfs 0 0K 196 namei_tracker 0 0K 20 export_host 0 0K 0 cl_savebuf 0 0K 183 lio 0 0K 35 acl 0 0K 0 mbuf_tag 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 procdesc 0 0K 12 ioctlops 0 0K 141 eventfd 0 0K 4 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 404 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 686 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 8 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 filecaps 0 0K 95 filedesc_to_leader 0 0K 20 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 90 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 13 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 10627 549 26805 0 254 45776896 0 mbuf 256 11087 600 62935 0 254 2991872 0 BUF TRIE 152 333 11471 4951 0 62 1794208 0 RADIX NODE 152 7329 3612 72452 0 62 1663032 0 malloc-384 384 4152 18 4514 0 30 1601280 0 malloc-128 128 11544 174 12277 0 126 1499904 0 UMA Slabs 0 112 12990 0 12990 0 126 1454880 0 malloc-4096 4096 331 3 522 0 2 1368064 0 malloc-16384 16384 21 60 1507 0 1 1327104 0 sctp_asoc 2256 12 498 36 0 254 1150560 0 vmem btag 56 19225 38 19254 0 254 1078728 0 malloc-64 64 238 16583 240251 0 254 1076544 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 FFS inode 1168 549 88 2284 0 8 744016 0 malloc-65536 65536 9 1 12 0 1 655360 0 sctp_ep 1152 12 499 86 0 254 588672 0 malloc-4096 4096 66 70 2323 0 2 557056 0 socket 1024 15 493 2118 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 198 0 0 2 519552 0 256 Bucket 2048 221 11 1556 0 8 475136 0 VM OBJECT 248 983 889 29751 0 62 464256 0 THREAD 1824 211 21 1675 0 8 423168 0 malloc-256 256 593 967 14645 0 62 399360 0 malloc-65536 65536 4 2 116 0 1 393216 0 sctp_raddr 736 12 505 76 0 254 380512 0 VNODE 440 591 165 2329 0 30 332640 0 MAP ENTRY 96 1000 2150 93603 0 126 302400 0 malloc-65536 65536 1 3 90 0 1 262144 0 malloc-64 64 3859 236 165267 0 254 262080 0 malloc-2048 2048 103 17 249 0 8 245760 0 malloc-16 16 14466 284 47268 0 254 236000 0 DEVCTL 1024 67 153 194 0 0 225280 0 tcp_log 416 3 510 339 0 254 213408 0 FPU_save_area 832 213 30 2985 0 16 202176 0 malloc-32 32 5673 501 45393 0 254 197568 0 PROC 1376 60 83 2235 0 8 196768 0 malloc-32768 32768 0 6 1074 0 1 196608 0 FFS2 dinode 256 549 201 2284 0 62 192000 0 UMA Zones 768 240 4 240 0 16 187392 0 malloc-128 128 1197 198 25869 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 3 513 1331 0 254 165120 0 malloc-32768 32768 1 4 56 0 1 163840 0 malloc-2048 2048 4 76 532 0 8 163840 0 filedesc0 1072 61 79 2330 0 8 150080 0 malloc-1024 1024 133 11 371 0 16 147456 0 S VFS Cache 104 1012 392 2785 0 126 146016 0 malloc-65536 65536 0 2 14 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-32768 32768 2 2 123 0 1 131072 0 malloc-32768 32768 4 0 4 0 1 131072 0 mbuf_packet 256 9 499 1625 0 254 130048 0 ksiginfo 112 125 919 697 0 126 116928 0 64 Bucket 512 176 48 5386 0 30 114688 0 g_bio 408 0 270 24995 0 30 110160 0 128 Bucket 1024 77 22 321 0 16 101376 0 malloc-128 128 529 246 3877 0 126 99200 0 malloc-128 128 423 352 2897 0 126 99200 0 malloc-4096 4096 18 6 604 0 2 98304 0 UMA Kegs 384 226 7 226 0 30 89472 0 ertt_txseginfo 40 2 2119 8032 0 254 84840 0 malloc-128 128 516 135 1216 0 126 83328 0 malloc-2048 2048 17 23 289 0 8 81920 0 malloc-384 384 53 157 3505 0 30 80640 0 sctp_readq 152 0 520 13 0 254 79040 0 sctp_chunk 152 19 501 76 0 254 79040 0 malloc-384 384 146 34 147 0 30 69120 0 malloc-64 64 645 426 3660 0 254 68544 0 malloc-64 64 587 484 4152 0 254 68544 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-8192 8192 5 3 138 0 1 65536 0 VMSPACE 584 31 81 2179 0 16 65408 0 malloc-256 256 69 186 2227 0 62 65280 0 32 Bucket 256 91 164 1264 0 62 65280 0 sctp_stream_msg_out 112 7 533 28 0 254 60480 0 malloc-8192 8192 5 2 26 0 1 57344 0 malloc-8192 8192 7 0 7 0 1 57344 0 tcp_bbr_map 128 0 403 326 0 126 51584 0 malloc-128 128 172 231 796 0 126 51584 0 malloc-128 128 41 362 5724 0 126 51584 0 malloc-256 256 67 128 2038 0 62 49920 0 malloc-256 256 80 115 2602 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 0 48 21561 0 16 49152 0 malloc-8192 8192 6 0 7 0 1 49152 0 malloc-4096 4096 3 9 1132 0 2 49152 0 malloc-4096 4096 8 4 17 0 2 49152 0 malloc-4096 4096 3 9 19 0 2 49152 0 malloc-2048 2048 14 10 542 0 8 49152 0 malloc-2048 2048 7 17 96 0 8 49152 0 malloc-1024 1024 7 41 519 0 16 49152 0 da_ccb 544 0 84 6492 0 16 45696 0 pcpu-8 8 5143 489 5630 0 254 45056 0 syncache 168 0 264 3 0 254 44352 0 tcp_inpcb 1304 9 24 204 0 8 43032 0 TURNSTILE 136 233 82 233 0 62 42840 0 pipe 736 16 39 441 0 16 40480 0 rl_entry 48 27 813 783 0 254 40320 0 ttyinq 160 135 115 840 0 62 40000 0 udp_inpcb 408 4 86 310 0 30 36720 0 hostcache 64 3 564 3 0 254 36288 0 malloc-64 64 39 528 32041 0 254 36288 0 malloc-64 64 6 561 7 0 254 36288 0 malloc-64 64 285 282 3200 0 254 36288 0 malloc-64 64 18 549 60 0 254 36288 0 16 Bucket 144 105 147 761 0 62 36288 0 tcp_rack_map 128 0 279 47 0 126 35712 0 routing nhops 256 27 108 50 0 62 34560 0 ttyoutq 256 72 63 448 0 62 34560 0 malloc-384 384 33 57 172 0 30 34560 0 malloc-384 384 76 14 97 0 30 34560 0 malloc-256 256 19 116 503 0 62 34560 0 malloc-256 256 26 109 230 0 62 34560 0 malloc-256 256 2 133 15 0 62 34560 0 malloc-256 256 32 103 1731 0 62 34560 0 ripcb 376 0 90 104 0 30 33840 0 SLEEPQUEUE 88 233 151 233 0 126 33792 0 malloc-32768 32768 0 1 2 0 1 32768 0 malloc-16384 16384 2 0 2 0 1 32768 0 malloc-8192 8192 2 2 4 0 1 32768 0 malloc-2048 2048 5 11 6 0 8 32768 0 malloc-2048 2048 15 1 80 0 8 32768 0 malloc-2048 2048 4 12 101 0 8 32768 0 malloc-1024 1024 13 19 44 0 16 32768 0 malloc-1024 1024 4 28 27 0 16 32768 0 malloc-1024 1024 26 6 7937 0 16 32768 0 malloc-1024 1024 12 20 12 0 16 32768 0 malloc-1024 1024 1 31 14 0 16 32768 0 malloc-1024 1024 2 30 1232 0 16 32768 0 malloc-512 512 2 62 36 0 30 32768 0 malloc-512 512 4 60 174 0 30 32768 0 malloc-512 512 6 58 300 0 30 32768 0 malloc-512 512 8 56 8 0 30 32768 0 malloc-512 512 4 60 75 0 30 32768 0 malloc-512 512 0 64 31 0 30 32768 0 pcpu-64 64 496 16 496 0 254 32768 0 PWD 40 22 786 1283 0 254 32320 0 ipq 56 1 575 2 0 254 32256 0 Files 80 109 291 11034 0 126 32000 0 tcp_log_id_node 120 1 263 5 0 126 31680 0 PGRP 120 16 248 80 0 126 31680 0 clpbuf 2624 0 12 160 0 4 31488 0 sctp_laddr 48 6 582 65 0 254 28224 0 malloc-32 32 265 617 3047 0 254 28224 0 4 Bucket 48 6 582 15 0 254 28224 0 AIO 208 0 133 84 0 62 27664 0 udplite_inpcb 408 0 63 22 0 30 25704 0 cpuset 200 8 120 52 0 62 25600 0 malloc-8192 8192 1 2 20 0 1 24576 0 tcp_log_id_bucket 176 1 137 5 0 62 24288 0 rtentry 168 30 114 50 0 62 24192 0 8 Bucket 80 89 211 649 0 126 24000 0 itimer 352 0 66 16 0 30 23232 0 splice 184 3 123 13 0 62 23184 0 malloc-384 384 1 59 4 0 30 23040 0 malloc-384 384 26 34 37 0 30 23040 0 tcp_rack_pcb 1088 0 21 18 0 8 22848 0 domainset 40 0 567 42 0 254 22680 0 Mountpoints 2816 2 6 12 0 4 22528 0 ertt 72 8 272 204 0 126 20160 0 malloc-32 32 45 585 1091 0 254 20160 0 malloc-32 32 93 537 1626 0 254 20160 0 malloc-32 32 173 457 2513 0 254 20160 0 malloc-32 32 11 619 31 0 254 20160 0 malloc-32 32 69 561 563 0 254 20160 0 malloc-32 32 5 625 1119 0 254 20160 0 2 Bucket 32 137 493 801 0 254 20160 0 KNOTE 160 2 123 198 0 62 20000 0 malloc-128 128 2 153 7 0 126 19840 0 cryptop 280 0 70 14 0 30 19600 0 AIOCB 552 0 35 90 0 16 19320 0 ktls_session 256 0 75 3 0 62 19200 0 L VFS Cache 320 0 60 37 0 30 19200 0 AIOLIO 272 0 70 35 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 2 0 1 16384 0 malloc-8192 8192 0 2 8 0 1 16384 0 malloc-4096 4096 0 4 21 0 2 16384 0 malloc-4096 4096 1 3 3 0 2 16384 0 malloc-512 512 0 32 11 0 30 16384 0 malloc-512 512 2 30 2 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 tcp_bbr_pcb 896 0 18 20 0 16 16128 0 vtnet_tx_hdr 24 0 668 4797 0 254 16032 0 malloc-16 16 510 490 6222 0 254 16000 0 mqueue 248 3 61 3 0 62 15872 0 mqnotifier 216 0 72 1 0 62 15552 0 kenv 258 17 43 1070 0 30 15480 0 mqnode 416 6 30 6 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 malloc-16 16 35 715 705 0 254 12000 0 malloc-16 16 37 713 610 0 254 12000 0 malloc-16 16 34 716 25038 0 254 12000 0 malloc-16 16 21 729 25 0 254 12000 0 malloc-16 16 50 700 125 0 254 12000 0 malloc-16 16 68 682 306 0 254 12000 0 malloc-384 384 0 30 1 0 30 11520 0 tfo_ccache_entries 80 1 127 1 0 126 10240 0 malloc-8192 8192 1 0 1 0 1 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 UMA Slabs 1 176 10 12 10 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 tfo 4 0 493 2 0 254 1972 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf frags 256 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 sackhole 32 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 mvdata 64 0 0 0 0 254 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 104 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0