last executing test programs: 1.776220537s ago: executing program 0 (id=1): open(&(0x7f0000000000)='./file0\x00', 0xf5fbbcdef939e6ea, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0xf5fbbcdef939e6ea, 0x0) socket(0x1c, 0x1, 0x0) r1 = socket(0x2, 0x0, 0x7) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000040)=0x2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="c8", 0x1}], 0x1, 0x0}, 0x0) freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f00000004c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', 0x0, 0x0) extattr_list_file(&(0x7f0000000100)='./file0\x00', 0x2, &(0x7f00000003c0)=""/153, 0x99) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DIOCNATLOOK(r3, 0x8008745b, &(0x7f00000003c0)="28a7c7f9812306") r4 = socket(0x1c, 0x4, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000004c0)={&(0x7f0000000000)=@in={0x10, 0x2, 0x3, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10145}, 0x0) aio_mlock(&(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffff, {0x0, 0x0, 0x0}, {0x0, 0x0, @sigval_ptr=0x5, @ke_flags=0x44}}) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) setsockopt$inet6_buf(r0, 0x29, 0xc8, &(0x7f0000000400)="c2ab696186c77aa094d0b92f940a17faa815293e84fa7a1f7aebf0f1459a0c2e105895fdcd9ef2fb12d5cde62a79c24f5f43231c965e7076a1439dbe0260aa9ee32bd44540d94387cd71c371f49c260d9d3ef4cee694bc9ead5710c0409dda9523e14ec972c64e0a0cdc339801e682f3f60ac7de193463", 0x77) r5 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x1aa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea01703c0020010000000000000000000000000002ff0200000000000000000000000000012b0a01"]) ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) aio_write(&(0x7f00000002c0)={0xffffffffffffffff, 0x5c, &(0x7f0000000780)="eb29ca18212d14e3c95bdf00f85351cbd228c6da204bbc0e622c3b2088dba5a3bfbfcff4bc46af4e2033a85f73f718af7698629d6f19027889edb523f479a11014834c3341b1c863ccf215ea219362a60a0afc7f1398c8a7968ce6b5c61bb631e028349aa2c6470ffced3eda865008db9f1bfddc17faf68c9f1e90e2522f1ea2f65bbd9b7cad98a07a4be8c4264e466839099d1195503636794b62d5dede884f6616f969793da671f517b1c73ebeef9b5c6e465aea678168429f6b2a78b435e07ddcba9af6ae91f55034bfeed67b1d515a3e029926cc24014580686365de6134befdb1355d8f6904eef9910c2d55c3dcb78801f6f0da1a2ac2edb37dd0e976", 0xff, [0x7, 0x5], 0xe4, 0x5, 0x24000, {0x1000008, 0x8004008, &(0x7f0000000180)="3c41406fd9feaefe7d4473239ab747fd001af16d436e3b8ea3a5c1599d8a9d0d395114c9660b000000008e9c26f4925a069e9a1f46fefc834fb3b4a1dc3bc603668e48779044a6f061b421"}, {0x3, 0xc, @sigval_int=0x100, @spare=[0x9, 0x6, 0x3, 0x4, 0x20005, 0xa1, 0x8, 0x5]}}) r6 = socket(0x1c, 0x1, 0x0) ioctl$KDGETMODE(r6, 0x40046676, 0x22e00000) sendmsg$inet_sctp(r3, &(0x7f00000004c0)={&(0x7f0000000000)=@in={0x10, 0x2, 0x3, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x149}, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1c, 0x1, 0x0) 1.731434149s ago: executing program 2 (id=3): r0 = socket$inet6(0x1c, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = socket(0x1c, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0xb, &(0x7f0000000140)={0x0, {{0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}}, {{0x10, 0x2, 0x1, @rand_addr}}}, 0x108) socket$inet6(0x1c, 0x3, 0x1c) sysarch$I386_SET_PKRU(0xc, 0x0) recvmsg(r0, &(0x7f0000000100)={&(0x7f00000003c0)=@un=@file={0xffd, 0x0, ""/4091}, 0xffd, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/117, 0x75}, {&(0x7f0000001500)=""/138, 0x8a}], 0x2, &(0x7f00000015c0)=""/129, 0x81}, 0x40000) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB]) r3 = socket$inet(0x2, 0x2, 0x0) bind(r3, &(0x7f0000001480)=@in6={0x1c, 0x1c, 0x3, 0x2, @loopback, 0x2000000}, 0x1c) syz_emit_ethernet(0x8e, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) setresuid(0x0, 0xee00, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000) sendto$inet(r1, 0x0, 0x0, 0x188, &(0x7f00000000c0)={0x10, 0x2, 0x3, @multicast2}, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f00000014c0)=@in, 0xc, 0x0, 0xfffffffffffffe38, 0x0}, 0x0) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x1c, 0x1, 0x0) __realpathat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/10, 0xa, 0x0) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) setitimer(0x2, &(0x7f0000003380)={{0x0, 0x65a6}, {0x0, 0x1}}, 0x0) getsockopt$sock_accept_filter(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000280), &(0x7f0000000000)=0x100) 1.719094152s ago: executing program 3 (id=4): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) sigaction(0xc, &(0x7f0000000200)={&(0x7f0000000180)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x35, {[0xfffff801, 0x50e5, 0xfdffffff]}}, 0x0) lgetfh(0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) listen(r1, 0x9) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f00000001c0)=@in={0x10, 0x2, 0x2, @multicast2}, 0x10, 0x0}, 0x185) r2 = socket(0x1c, 0x1, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x7e) socketpair(0x1, 0x2, 0x3, &(0x7f00000000c0)) lchflags(&(0x7f0000000000)='./file0\x00', 0x8014) pwritev(r4, &(0x7f0000000080), 0x0, 0x0) fspacectl(r3, 0x1, &(0x7f0000000040)={0x3ff, 0x94d}, 0x0, 0x0) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "c900", 0x30, 0x3a, 0xff, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@time_exceed={0x3, 0x1, 0x0, 0xf8, '\x00', {0x0, 0x6, "8cba5e", 0x95, 0x6, 0xff, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}}}}}}}}) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="00000200", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x2, 0x6, 0x0, @multicast2, @multicast2}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0xa7, 0x0, 0x406, {[@sack_perm={0x4, 0x2}, @sack={0x5, 0x2}]}}}}}}}) kevent(0xffffffffffffffff, &(0x7f0000000440)=[{0x6, 0xfffffffffffffffc, 0x10, 0x40000000, 0x11, 0x1, [0x8000000000000000, 0x6, 0x54bb, 0x2]}, {0xdaf, 0xfffffffffffffffb, 0x4039, 0x100, 0xfffffffffffffd8a, 0x2, [0x4, 0x9, 0x7, 0x3]}, {0x5, 0xfffffffffffffffa, 0x4, 0x156, 0x2, 0x9e2, [0x9, 0x200, 0x2000010001, 0x5a]}, {0x4, 0xffffffffffffffff, 0x0, 0x80000000, 0x7, 0xd, [0x4, 0x0, 0x2, 0x76]}, {0x0, 0xfffffffffffffff8, 0xa, 0x20, 0x8000000000000000, 0x4, [0x6, 0x69, 0x6, 0x4]}, {0x9, 0xfffffffffffffffb, 0x1, 0x0, 0x5, 0x79d, [0x200000000000005, 0x100, 0x4, 0x9]}, {0x7, 0xfffffffffffffffd, 0x20, 0xc0000000, 0x80000001, 0x800b, [0x4, 0x1, 0x4, 0x4]}, {0xffffb767, 0xfffffffffffffff8, 0x10000, 0x10, 0x94, 0x4648, [0x9, 0x8, 0x3, 0x8]}], 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x5, &(0x7f00000001c0)={0x4e9, 0x4}) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x8, 0x3fffffffffffffd]) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) r6 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r7 = fcntl$dupfd(r6, 0x11, r6) ioctl$KDGKBTYPE(r7, 0x40044b40, 0x9) 1.599182177s ago: executing program 1 (id=2): aio_waitcomplete(0x0, 0x0) profil(0x0, 0x0, 0x1, 0xd6) socket(0x10, 0x20000000, 0x57) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x2) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc030636a, &(0x7f0000000080)={0x17, 0x1e, 0x10, &(0x7f0000000100)="ec7b00002cfeff02000000000000007f", 0x0, 0x0, 0x0, 0xfdffef85, [0x0, 0x0, 0x0, 0x3]}) ioctl$CIOCCRYPT(r2, 0xc01c6367, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x49, 0x0, 0x0, 0x0, &(0x7f00000004c0)}) sendmsg$unix(r1, 0x0, 0x0) socket(0x2, 0x2, 0x7) r3 = socket(0x1, 0x5, 0xfc) r4 = semget$private(0x0, 0x7, 0x160) semop(r4, &(0x7f00000000c0)=[{0x3, 0xd, 0x1800}, {0x0, 0x3, 0x800}, {0x4, 0x5, 0x1800}, {0x0, 0x7, 0x1000}, {0x0, 0x1}, {0x1}], 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0), 0x4) r5 = socket$inet6_udp(0x1c, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0x1c, 0x1c, 0x2, 0xfff, @loopback, 0x2f9e}, 0x1c) r6 = socket(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x10, 0x2, 0x2, @remote={0xac, 0x14, 0x0}}, 0x10) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) syz_emit_ethernet(0x9f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa2f753623b7caa4aaaaaabb08004a0000910000000005019078ac1400aae0000001820ec2519f21a4b2125b7e9f091b0703040000000800907800002b1710622f9c461bcee0198a7190e67c8c395d6c64be9726cfa6ac22308f3c8bb6cceff11291fb24e53139aa43fdc353ff88333b5860316d01354c775cf146dca7c52ef74ea4c04efb5b0389d5bf1d4da56c17777f9489c3da2e114645968fe529cf4fa1ffff696906395255fb015b0f7a2dccf4a36410dd060f00000000da9de3a537d9952c0000000000000062c8e3832eaa88de251774a5befbe05d2b4f0f1cbe37"]) rmdir(&(0x7f0000000080)='./file0/file1\x00') socket(0x1c, 0x1, 0x0) socket(0x1c, 0x1, 0x0) openat$smbus(0xffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$SMB_PCALL(0xffffffffffffffff, 0xc01c6909, &(0x7f0000000040)={0xb6, 0x3, 0x9, @buf=']r', @buf, 0xda, &(0x7f0000000280)=0x4, 0x1, &(0x7f00000002c0)=0xb, 0x1}) pipe2(&(0x7f0000000080), 0x100004) execve(0x0, &(0x7f0000000100)=[&(0x7f0000000000)='\x00'], &(0x7f0000001900)) 857.487537ms ago: executing program 3 (id=5): aio_waitcomplete(0x0, 0x0) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x24, &(0x7f0000000500)="869dd2f35d15", 0x6) rfork(0x1000) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0x13c) r3 = openat$bpf(0xffffff9c, 0x0, 0x1, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file1\x00', 0x23f) setresuid(0x0, 0xee00, 0x0) unlink(&(0x7f0000000000)='./file0\x00') ioctl$BIOCSETF(r3, 0x80084267, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x1d, 0x1, 0x3, 0x3}]}) r4 = socket(0x1, 0x2, 0x3) syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa34ed432a7a6e86dd60ae029d00343aff78042000000014000001000000086500ff02000000000000000000000000000103009078810000006945e12800088800f0a8550f04fed9b43740b3dba37e1fe2df020000000000000000000000000001c1043042"]) r5 = socket(0x10, 0x5, 0x0) __semctl$SETALL(0x0, 0x0, 0x9, &(0x7f00000007c0)) getsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000280)={@multicast1, @remote, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_mreqn(r4, 0x0, 0x9, &(0x7f0000000140)={@local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, r6}, 0xc) ioctl$BIOCSHDRCMPLT(r2, 0x80044275, &(0x7f0000000380)=0x4) ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) dup2(r4, 0xffffffffffffffff) socket(0x11, 0x3, 0x0) fstatat(r3, &(0x7f0000000000)='./file1\x00', &(0x7f0000000540), 0x4100) ksem_init(0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x40044b09, 0x0) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) r7 = socket(0x1c, 0x1, 0x0) select(0x40, &(0x7f00000000c0)={0x6, 0xe535, 0xc, 0x807, 0x9, 0x80, 0x3, 0x5}, &(0x7f0000000140)={0xe, 0x6, 0x8000000000000000, 0x400, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, &(0x7f0000000180)={0x7ff, 0x101, 0xdf, 0x5, 0x7, 0x2, 0x4, 0xa13}, &(0x7f00000001c0)={0x8001, 0x3ff}) ioctl$KDGETMODE(r7, 0x40046676, 0x22e00000) 844.393376ms ago: executing program 2 (id=6): symlink(&(0x7f00000003c0)='.\x00', 0x0) aio_waitcomplete(0x0, 0x0) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$CIOCGSESSION2(r0, 0xc030636a, &(0x7f00000004c0)={0x17, 0x0, 0x9, &(0x7f0000000400)="ec5b00002cfeff0200", 0x0, 0x0, 0x0, 0x81, [0xffffffff, 0x0, 0x40000, 0x3]}) ioctl$CIOCCRYPT(r0, 0xc01c6367, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x8000, &(0x7f0000000140), 0x0, 0x0, 0x0}) socket(0x1c, 0x1, 0x1) r1 = socket(0x2, 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) sigaction(0xc, &(0x7f0000000200)={&(0x7f0000000180)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x35, {[0xfffff801, 0x50e5, 0xfdffffff]}}, 0x0) lgetfh(0x0, 0x0) listen(0xffffffffffffffff, 0x9) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) sendmsg$inet_sctp(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x185) r3 = socket(0x1c, 0x1, 0x0) r4 = open(0x0, 0x80000000000206, 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x7e) lchflags(0x0, 0x8014) pwritev(r5, &(0x7f0000000000), 0x0, 0x2) fspacectl(r4, 0x1, &(0x7f0000000040)={0x3ff, 0x94d}, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) r6 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000080)={0x1c, 0x1c, 0x1, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}, 0x1c) sendmsg(r6, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20004) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0xa) 747.796263ms ago: executing program 1 (id=7): aio_waitcomplete(0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) sendmsg$inet_sctp(r0, 0x0, 0x0) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc030636a, &(0x7f00000000c0)={0x10, 0x20, 0x0, 0x0, 0x1, &(0x7f0000000040)="fb", 0x0, 0x4d46b770, [0x0, 0x0, 0x3ff]}) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0xff8d, 0x2, 0x2}, 0x10) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaa2aa2aa0000000000f7080045400028000000000006e106e4fc969f5b1d00aa4e204e22e09af84c8a9c3cacc4dffe53ddcecd27e447c6278d57c6707a2548d08e822ffd5eed4df023dae4d507ef6605f9fd42fad78a01fa34d53893d7352328e3cd013c164483989a79f9557811c97da4e77bec4ea5c11d60a17f2d1ef9", @ANYBLOB]) r2 = socket(0x1c, 0x1, 0x0) r3 = socket$inet6(0x1c, 0x3, 0x6) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x31, 0x0, 0x0) sendmsg$inet6_sctp(r3, &(0x7f0000002ec0)={&(0x7f0000001cc0)=@in6={0x1c, 0x1c, 0x1, 0x2, @remote={0xfe, 0x80, '\x00', 0x0}, 0xc}, 0x1c, 0x0, 0x0, &(0x7f0000002e00)=ANY=[@ANYBLOB="1c00006dcb38", @ANYRES32=0x0], 0x1c, 0x108}, 0x109) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) aio_return(&(0x7f00000001c0)={0xffffffffffffffff, 0x8, &(0x7f0000000540)="62bc924e915111afcf62ad01a8435a1380dc47f6ed3d512db36e2476ff5580bf2d96e9630cfd10805ad1744e312755316a6ab6268539b987d08814605b99302ec258f184e12043489e65c184b02d15877bbd58cdb706086188a73e8ec919af6b3bf2d4", 0x63, [0x1, 0x22], 0x7f, 0x2, 0x50, {0x6, 0x80, &(0x7f0000000000)="4d2856d0ebf815a858922c5dac954a96cf78c27f0b74abdedf5526aae2"}, {0x3, 0x14, @sival_int=0x7fffffff, @spare=[0x7, 0x4, 0x1, 0x4, 0x8000, 0xffff, 0xffff19a8, 0xc6]}}) listen(0xffffffffffffffff, 0xb6) r4 = socket(0x1c, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x2000000d, @ipv4={'\x00', '\xff\xff', @rand_addr=0x6}}, 0x1c) recvmsg(r3, 0x0, 0x0) r5 = socket(0x1c, 0x1, 0x0) freebsd11_fstat(r5, &(0x7f0000000140)) ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) setsockopt$sock_splice(r4, 0xffff, 0x1023, &(0x7f0000000080)={0xffffffffffffffff, 0x400bab8, {0x6, 0x4}}, 0x20) syz_emit_ethernet(0x106f, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0xffd, 0x0, 0xfffd, 0x0, 0x11, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x6, 0xe}, @ra={0x94, 0x6, 0x4}]}}, @udp={{0x2, 0x1, 0x8}, {"b3b52a296adb962a8146bd3ece35b17be905d82e61e5c436b1093ce835eb2b8d229f93cf9d095434c1a9e1b2b5cc655286f678c8c5d3de36faf936a9d7ddc8f04f45408e060c3cbde1c4d6b731d2030c02a06f624c184572e14b2993eefa6075950e5f9d1494b060b9a4d0f769f02ced17ba8e81554357729a98d7b8031febf85626eb803114d6e14293d93bf9f5d567e383ca1cf6f34e976bd4f8b31055c198756176e3bb38949e16d3420d820c21d447b5f3fb7fd4d8669827028bb6d95e482b531bc965beb5d7beb678a41373248601e8945f6cc16939168c18cee9df4508c6f7c7ce41a6b60c71fcf5adee56814800fea106df4b595c0049c029b3bdea695a3d1362ce51519761e0884a35fdc2add4539243a387f55b7d84390b21fe80a4e54ca120c0d42c4cd3285743b328fe9b3c8436ca3179855e405f5158de2f9a314b1ea3fb9d9b4d7b6ca8472956fa147852827353c1523607eca1c513557079fdbaed8c03f85f062b1563e7ac9dc6ed573eb42905237def9e34aa8b4b85228e5ae774234569150fe2bb7447a1dd691d2e539ea0cbd3e6d571f72e69956f21a344e4d0f237b234a5d95008be5f5a96e4e80d6de8cd7ee1da22ed21f192811b9c1838cc4bb1986a46d8626db7e0bbefeda5749df03123c8fba28c2c85ac01a65107fb667d736931692ef3bdd7118e0d2dc77011e57b02dd022ba11df3fdefaea67c07b929432cdac795ca1e31c9cbd14b261a08680e7a64b92d5244ec20d88bd6636586be0e812e5f0c52f33367fc962bb88b63f20a9cce9189a66f3c1fa9a3b25cc7e8f36ca16660c7d5595c6b6ce37f3643c62c254eea7f73b703ba017654e4c72e7cacde2f587db84ea9df934806ec6303931ceee8bd96b834524b1c98c95310f7d284c60e77b1b148165c4018ea741550603de818474b0adbf21d1f7ea5596c74932da6d80fa4b635cde59b68732da5e453333f50f8a787247a9bad5abb0c79f76d0afd622e4293c7be185a82ae08b4d3c64ea0f4efdde1713926bb00a6e743cc601e2246f9a93e3566677fa1d60e348ac5827467b7c8d403eb71e7674fa5a229e7f4a1b4967c18fee32b76091183ed31fbb4a917044060bccda9e7a32a1a767935d2cdcc303c77e3cbe9ff93fd11d84bf9e52bd0eb6775996ac21d46429ef1af533134b052db02869b1c2a762aebb35a69eed2b7fbc3601195831028564cda735628fb77a082e1533f4ef0ff3802b91bc0c0506525b4fa3c87b50191c9abd1afa5b3ddc2150a69e08c95ff45966590952e9cb53f94d6f210996e3b6fb21cbf33f45bda8366c3b8b2221b7419921eacefe7e7eff90f179158fae03b0be271e89371562c9e5723bcea0c27397447134a2e20732e7b52cd763e52099e7c1108f029f60bb7b603d19955b8da03241dd53ae16c2bf1091c6ba06c9efbd7a1441bf2057dfd35a90d9119dcc24acb7e4b38b31012b572838eb96a39f076ac91a629bbba7cac4c135edca2ce74ae64d790d08e136a67f596c8d2c9a36977eaa6e4040d3ec96d4e5c3a1a5b33707c512a740a0f0395cf3412b37d7c207a980cd91ca7f36d84ac1aad7f908e7f425e4fe1737c66e3dc64a36031cdd4264060277bd69b683fdacf417ec43106ee70eeb198bc823734a2af4fac549fb0d91dac3ea2f7f32d78889a3e1c9f5bab4b6d04da1eefe85f86601aa9c503d97abb6d2391c9fd5a4c289bc5164776c7653a378e2942f745747baf603fea340f580e3629bf02c8580a1db2e681a62d03158d9b932188f127585066df24fe010dad8b73d759a97e8949ce0f130401add2a16e5239644acfea004538bc4d2d5095b5947870a4878ac530211b1017a1c5228028524af95a9a5bfd82081da13cf13f4edcf42fae0bbed39cee328caeef4006072f0ae918c1b5198fd3c03dd506250f1d46a457e3a1cf1733f6f73783cb8fcc7c604bf0a21d5d0ad8ef212dc41feddf4d5c292a0179fceaf59bb5a931d39ca8b19f0f40f4258daee7612405a02ce63acb71b18d35f437ae328a66d760a18757254cf54723698eab4d96675b5239e0006d40ce7d2d306aca5cb5af5b924948e42dba0a5d23cacbb7760ce9eb2a3bfb7003edef3920f3eec8f5192e8c2354f49ef0e5a3356e566858ed38b96826157d1f14aefbd603d4a5b15b4cab41628ac1bac0cfa7e7f0ecc72b7930b5fe0c13183f2b9c4f8e4547bbb77d729c655ba4510d7fc2bbb1e4ec9ad5f351944a8b696e3c61d331f1c70a628a84f38ebfd3a50e8a9406b7f854cce0f9b5091a2396ca5ae173a62ae18a5ddca71f0dd0f6e7e3973eece09170d52eda832746ab69ba1284f9066cd7f782494719c5559b6e4122fc90adc10a8e0292498afe6003aa40faa5654b1b17fae6d9299aecb0cf7361db47416d3bed02b7a9fe46b1c8599ae9131e0477a0e5022140108218d2428108d1c96e80b09f1e5fa0add0ad381a52bbc3171d0b6d1a31d8f96633f650dc2a6aef6d025f73dba1d1dd7626fd97c97d3877f4a5780d91e2d7664995d175d3f784c671286b82b2d5f5f2bd0437bb67550766643c752df338b1ee47145414f6cc4683da7e79632a78d03c8d30322dd2db4f90b4aa1bb6eb7bb4ac44a5f2a63816f1b96d83c9fd665379b931bbdbebd2b3bed5b3bb1508dd11a1d3562ac8c51c1e24449dfc4fc5e08f2c5a48dded58c91e2437784dd3645035f760f40aa44356c30a7f34052158b7d0521da4449bcd733daa33614a6da2f0b999c165e67930edb1998001ad9456042fbb9bf3b96dadeea57986ea64871193d0a387c1323da9ffdd6579df9a64c29088207e4ae871390006a0f6b016caa9daa0975b8ba36c63e24b26586bc9bd1aad0f5665a74d951a567c57502a387310011196088ba8b1636f291fc0ce19f26e55b44b6611972b38d0253165c6de683affdf065fbd19bae617f99f504b91f7808a16037da5bd203d00210742f4de6b699c4b6cbf05824961b9f530442ea58fbfeb59d21c0531deac0e5e2b6ed88131c4d369281f6a8c08862d353e808f738bbdefcefd69fecf5a7ec329323d83c8989e5325d6e711c64f89bd25c37544f80f8f1634229235e85b398de12c78bb95d853497fdab4a82938298d46e2b9bdf650259a45857aba1bef9353837bf4617453bf378f8d984312c73ea3d58811c5d645198269ff7d0be879e913b9efea73e5073bba13d167970f3d0da842299c875ed8d537dd32e1e689036f0d2346ccbeb6e4d41594e8800094fe658db8589e9197746112b9ba944f3d700afe583d3dc445bad87076f45be8296a6ebad8f6fad4468f07585f80b42f6a52d439d3bcb76d56fe12b163106ab19c0efd686a1175445352460b6e28e2e5021a12dff26c25eaa6b321a1c3c01cb1d6a7b1a493249d964403e39ac95ce523a1486fdc359ca2bd05a17ef6a1bd457d52e4514a0aac0dbbfd2bc3172461641844f321650db5782060aefb0bcae16737288f934f7e9a9afc84923ea7c3380c6f83150adc4c1c9674d3fe2e363c18dba483e00cb178c719f1b039334f63ead675306a905cc70c005f983b954f79c9f488af2ccfac1e3824ef953ebe0c0c3075ac33ddb14a53758ae7f401c98ed19e98c75fb9f021a7a34779530de904d030dc3a6d41ec0a073e420319a90732b6407cc78de66fe863d21dd829084a6090f53f4459636a755acfa7119ff06aa8f0bb0b579ccd35205f2b27802a71ac2108c9b7b846b6657abfbb3badb8635457a177b48a9766893cfeb23b3edd1408d6ed29d1b4dd0f77d7d5f9eb7cff7e03c3a12819ffde885f687b85e734b4852b95f91e63029e8fe473524ca1ec2666c80f83e467e661a6ad179651e31db01f9954dde7e69915d49df17bed731b2d4966a8d0e2a299780a42401accac09ff90eefd34a517aaff01a435e4b54be18a4f8d59264bfb9cc4ba27b61f3d51f86e2751ca710bffdce3e9b9b1d997f3bac7e9883ee6c1d99ee45c6bf72d0c3381371a9b0e144b59b4b6f20c749d9c05bbcd124479916873ee01abe5c19219041948332b7132344b644076fa28d84e4503df64c35e31f88c4f82660cad9ef75605e9742747dbd1a1945a0bdb58672beade65fe86400a88c94bb6ac441dd25e4dd3211a760d1236c7f2fba265e2793c7680f8b5857fcb4912fb1e4bc950cdd0cd310b07d7634355588451b3c2332432f23d32c6378fa564cfff119bf74f84c791f43e6d72363765ca6a0174859f83bb3c8ad0d1c15d15f998bd40c77831161984b81f10e33004b50644e2e7e678dcbd89b2aa7e868fba79226a8e514baee2f171480d4e66b1ba8a64408fe61f346b975eb2a669321babd943276b7738384b7393784d06904c76f3315cb4ef39b714c381067f6651d727eff0dc94c2a4853cb68db6f50062a86367dea4589208adce92789d54de82a53b26bcfb9010221861fd3dda419e70d08fa7a4bf2d33b15f2229de4b06b203f8e57498004d4b2c83fbaea53deb4f025670e6c3378da3b64c5c1562677d294d2d4d8efe54d86b8ac9b497149f89431516740a8e6b5f89c0242074e16c2176b0c71e4eacf45287d3215f4cb21dafdee73f585d1c16b57615b70bc0754a5892c513aeebf061d18ab18452befa199fd9a8af86e6ad76ccb89e4e2a0195833723d485581eb4e4cd424f61fec4f13e37d61380ae1d7cc0f973c49efb83dd98afd55dea952271c5e63cfdb5864fb50ed140be1002927258fb0969b425bf8fc0c1b4ae612f198da966f7305484c0cd81976e63857c3f9af0dd39f8883a87971705825a88f45f04a25e804828eb208be7c4a6a8f4b13a03a0e54ac1fcaf55b704c3cadc57916845891c982bdf6c55aa1665a2c117443e284ff35ac0c91f016a725030c894bfe3d5c4e373644865602eaa9aa99a7f6199f33ecbd3946317fa9af4044ca2460e015a10d26b365e1c767acbe049bd8b99bfe307ff2edf3b4d492a181b351ef2c822a8d3c2fa93e81658949765cfa0d84976ddec03366d2bc0c93ff3ce255873f899e2ccc196096b1ef733a18b0e8617dab0a206978f757494f00224046f65b9e47e1d8e5cf1c349658c781c05210c94505f8c723a6cdc8171c2da85e0939dd30a9b4fb21f743b7fcda977afd1a5e4b316365d6f904d6f0d110e7278ff1dfd1dff9fa9294129e7da7aacd0a4656b34141258a093897db5b3bf49d23251f7c153cdf4626f171e820d7042cd040b5417534bc2c5fa7856503fa2ed5c2a7cb67ae807341abd1197e0fd80acb75f73b2d92cfc9d882d56eb2033dbdefd83881d4ed5a61d95844eedebf56054d5dc93751c32edb3c1874484cb5987fac1817ee441a20032c031532cb1dbe9f28616671e8c8fd98b5936767946effd78c011c0b2fcee6748cab6578dff22c2d569c937e43bcd7e8704415581ba29e0006455183bd6a46686a4f58d6bb0d4c0470eb103ecafbe160195d30472a9cf09dad7d0afcb34ba8040c05dfdebf02f406bdc795e884324bab8111c6bbdc36680632daed2a52a3cd1cb1a2ab2e0ae6dd1034caa4f139eac3b7b5fa29d06c7e35e57447f7ac256ca37831e86d087333c037557a4721008c4e53f4c5d7980d2a8ccff028fb9bab5466cd96c2bf1a8aad500706ef398df3cf728a225f8f70a201a8518c3bce2cd3ace8c0040e6ae9f130b5367c6c2293111ff10a9bd7bcf10ea9a4a175999a670cdae9a333dde206f6337ae321127243ffb86e12981b38c13f6d0dc5364"}}}}}}) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc030636a, 0x0) 0s ago: executing program 3 (id=8): open(&(0x7f0000000000)='./file0\x00', 0xf5fbbcdef939e6ea, 0x0) open(&(0x7f0000000080)='./file0\x00', 0xf5fbbcdef939e6ea, 0x0) socket(0x1c, 0x1, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x101) r0 = socket(0x1c, 0x1, 0x0) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r1, 0x80000001, &(0x7f00000004c0)='E', 0x1, [0x3], 0x200000000000000, 0x8, 0x0, {0x1, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562f1, @ke_flags=0xc088}}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) kmq_unlink(0x0) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) r3 = socket(0x1c, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f0000000040)=0x2, 0x4) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DIOCNATLOOK(r5, 0x8008745b, &(0x7f00000003c0)="28a7c7f9812306") r6 = socket(0x1c, 0x4, 0x0) sendmsg$inet_sctp(r6, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x6, @mcast2, 0x3}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x10145}, 0x0) aio_mlock(&(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0xc60, 0x0, 0x7ff, {0x0, 0x0, 0x0}, {0x0, 0x0, @sigval_ptr=0xe, @ke_flags=0x44}}) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) socket(0x1c, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. lock order reversal: (sleepable after non-sleepable) 1st 0xfffffe0059693808 tun_mtx (tun_mtx, sleep mutex) @ /syzkaller/managers/i386/kernel/sys/net/if_tuntap.c:1688 2nd 0xffffffff83ccba40 tun_ioctl (tun_ioctl, sx) @ /syzkaller/managers/i386/kernel/sys/net/if_tuntap.c:1387 lock order tun_ioctl -> tun_mtx established at: #0 0xffffffff81680251 at witness_checkorder+0x781 #1 0xffffffff815059e7 at __mtx_lock_flags+0x187 #2 0xffffffff8186b436 at tuninit+0x76 #3 0xffffffff81859784 at ether_ioctl+0x1b4 #4 0xffffffff8186a1d2 at tunifioctl+0x3c2 #5 0xffffffff819a5ed4 at in_control_ioctl+0x1744 #6 0xffffffff81849401 at ifioctl+0xe51 #7 0xffffffff8168effa at kern_ioctl+0x4ca #8 0xffffffff8168ea3e at sys_ioctl+0x36e #9 0xffffffff82164702 at amd64_syscall+0x4e2 #10 0xffffffff8210964b at fast_syscall_common+0xf8 lock order tun_mtx -> tun_ioctl attempted at: #0 0xffffffff81681122 at witness_checkorder+0x1652 #1 0xffffffff8156f619 at _sx_xlock+0x139 #2 0xffffffff81869e9a at tunifioctl+0x8a #3 0xffffffff8184604b at ifhwioctl+0x1dab #4 0xffffffff81867902 at tunioctl+0xd92 #5 0xffffffff811dce96 at devfs_ioctl+0x266 #6 0xffffffff82326ce7 at VOP_IOCTL_APV+0x87 #7 0xffffffff817ec867 at vn_ioctl+0x3c7 #8 0xffffffff811ddd59 at devfs_ioctl_f+0x69 #9 0xffffffff8168effa at kern_ioctl+0x4ca #10 0xffffffff8168ea3e at sys_ioctl+0x36e #11 0xffffffff80442dd7 at freebsd32_ioctl+0x607 #12 0xffffffff822eec12 at ia32_syscall+0x4d2 #13 0xffffffff82109eaf at int0x80_syscall_common+0x9c Sleeping thread (tid 100126, pid 802) owns a non-sleepable lock KDB: stack backtrace of thread 100126: sched_switch() at sched_switch+0x10b8/frame 0xfffffe0056cf9b40 mi_switch() at mi_switch+0x33e/frame 0xfffffe0056cf9b70 sleepq_switch() at sleepq_switch+0x1f0/frame 0xfffffe0056cf9bd0 _sx_xlock_hard() at _sx_xlock_hard+0xcdc/frame 0xfffffe0056cf9d90 _sx_xlock() at _sx_xlock+0x1ed/frame 0xfffffe0056cf9e50 tunifioctl() at tunifioctl+0x8a/frame 0xfffffe0056cf9f10 ifhwioctl() at ifhwioctl+0x1dab/frame 0xfffffe0056cfa1d0 tunioctl() at tunioctl+0xd92/frame 0xfffffe0056cfa2f0 devfs_ioctl() at devfs_ioctl+0x266/frame 0xfffffe0056cfa3e0 VOP_IOCTL_APV() at VOP_IOCTL_APV+0x87/frame 0xfffffe0056cfa410 vn_ioctl() at vn_ioctl+0x3c7/frame 0xfffffe0056cfa620 devfs_ioctl_f() at devfs_ioctl_f+0x69/frame 0xfffffe0056cfa670 kern_ioctl() at kern_ioctl+0x4ca/frame 0xfffffe0056cfa750 sys_ioctl() at sys_ioctl+0x36e/frame 0xfffffe0056cfa8d0 freebsd32_ioctl() at freebsd32_ioctl+0x607/frame 0xfffffe0056cfad10 ia32_syscall() at ia32_syscall+0x4d2/frame 0xfffffe0056cfaf30 int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0xdffdbf98 panic: sleeping thread holds tun_mtx cpuid = 1 time = 1757646237 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056a7c9d0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056a7cb30 vpanic() at vpanic+0x257/frame 0xfffffe0056a7ccf0 panic() at panic+0xb5/frame 0xfffffe0056a7cdb0 propagate_priority() at propagate_priority+0x521/frame 0xfffffe0056a7ce00 turnstile_wait() at turnstile_wait+0x663/frame 0xfffffe0056a7ce70 __mtx_lock_sleep() at __mtx_lock_sleep+0x452/frame 0xfffffe0056a7cfb0 __mtx_lock_flags() at __mtx_lock_flags+0x1fe/frame 0xfffffe0056a7d0a0 tunstart_l2() at tunstart_l2+0x74/frame 0xfffffe0056a7d100 tap_transmit() at tap_transmit+0x1d0/frame 0xfffffe0056a7d150 ether_output_frame() at ether_output_frame+0x30c/frame 0xfffffe0056a7d210 ether_output() at ether_output+0x114b/frame 0xfffffe0056a7d380 ip6_output_send() at ip6_output_send+0x1b6/frame 0xfffffe0056a7d400 ip6_output() at ip6_output+0x44de/frame 0xfffffe0056a7d930 mld_dispatch_packet() at mld_dispatch_packet+0x8d1/frame 0xfffffe0056a7da90 mld_fasttimo() at mld_fasttimo+0x1900/frame 0xfffffe0056a7dcd0 softclock_call_cc() at softclock_call_cc+0x422/frame 0xfffffe0056a7de80 softclock_thread() at softclock_thread+0x200/frame 0xfffffe0056a7def0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056a7df30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056a7df30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 2 tid 100031 ] Stopped at kdb_enter+0x6e: movq $0,0x259f6a7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff82804a80 .str.27 rsp 0xfffffe0056a7cb10 rbp 0xfffffe0056a7cb30 rsi 0 rdi 0xffffffff816419b9 printf+0x149 r8 0 r9 0xffffffff r10 0x6 r11 0x5 r12 0xfffffe000781a780 r13 0xfffffffffffffffd r14 0xffffffff82804a80 .str.27 r15 0 rip 0xffffffff8162b4ee kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x259f6a7(%rip) db> show proc Process 2 (clock) at 0xfffffe0007808008: state: NORMAL uid: 0 gid: 0 supp gids: 0 parent: pid 0 at 0xffffffff83b55080 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b55080 reapsubtree: 2 sigparent: 20 vmspace: 0xffffffff83b56060 (map 0xffffffff83b56060) (map.pmap 0xffffffff83b56100) (pmap 0xffffffff83b56170) threads: 2 100031 L *tun_mtx 0xfffffe00079fa000 [clock (0)] 100032 I [clock (1)] db> ps pid ppid pgrp uid state wmesg wchan cmd 823 0 0 0 DL (threaded) [so_splice] 100142 D - 0xfffffe005858e700 [thr_0] 100143 D - 0xfffffe005858e740 [thr_1] 822 764 764 0 R (threaded) syz-executor 100119 RunQ syz-executor 100140 S aiowc 0xfffffe00540f48f8 syz-executor 100141 S uwait 0xfffffe006df7d980 syz-executor 821 765 765 0 S (threaded) syz-executor 100120 S nanslp 0xffffffff83babc41 syz-executor 100137 S aiowc 0xfffffe00540f43a0 syz-executor 100139 S uwait 0xfffffe00584ead00 syz-executor 819 818 423 0 L *tun_mtx 0xfffffe00079fa000 ifconfig 818 809 423 0 S wait 0xfffffe00540d7010 sh 817 1 817 0 Ss select 0xfffffe0058612f40 dhclient 814 0 0 0 DL aiordy 0xfffffe0054004568 [aiod4] 813 0 0 0 DL aiordy 0xfffffe00540d5ab0 [aiod3] 812 0 0 0 DL aiordy 0xfffffe00540d5000 [aiod2] 811 0 0 0 DL aiordy 0xfffffe00540f3568 [aiod1] 809 791 423 0 S wait 0xfffffe00540aa568 dhclient 802 763 763 0 T (threaded) syz-executor 100118 s syz-executor 100126 D tun_ioc 0xffffffff83ccba40 syz-executor 791 423 423 0 S wait 0xfffffe00540ab570 sh 766 762 766 0 R CPU 0 syz-executor 765 762 765 0 R syz-executor 764 762 764 0 R syz-executor 763 762 763 0 S nanslp 0xffffffff83babc41 syz-executor 762 760 760 0 S select 0xfffffe0057df8940 syz-executor 760 758 760 0 Ss sigsusp 0xfffffe00540aa0c0 csh 758 681 758 0 Ss select 0xfffffe00586133c0 sshd 747 1 747 0 Ss+ ttyin 0xfffffe0058279cb0 getty 746 1 746 0 Ss+ ttyin 0xfffffe005862f0b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe005862f4b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe005862f8b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe005862fcb0 getty 742 1 742 0 Ss+ ttyin 0xfffffe00586300b0 getty 741 1 741 0 Ss+ ttyin 0xfffffe00586304b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe00586308b0 getty 739 1 739 0 Ss+ ttyin 0xfffffe0058630cb0 getty 737 1 17 0 S+ piperd 0xfffffe0059765e60 logger 736 735 17 0 S+ nanslp 0xffffffff83babc40 sleep 735 1 17 0 S+ wait 0xfffffe00540f1000 sh 685 1 685 0 Ss nanslp 0xffffffff83babc41 cron 681 1 681 0 Ss select 0xfffffe00586137c0 sshd 494 1 494 0 Ss select 0xfffffe0057ddbc40 syslogd 423 1 423 0 Ss wait 0xfffffe00540aaac0 devd 422 1 422 65 Ss select 0xfffffe0057de00c0 dhclient 337 1 337 0 Ss select 0xfffffe0057ddbd40 dhclient 334 1 334 0 Ss select 0xfffffe0058613840 dhclient 16 0 0 0 RL [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru] 14 0 0 0 RL (threaded) [bufdaemon] 100079 RunQ [bufdaemon] 100082 RunQ [bufspacedaemon-0] 100094 D sdflush 0xfffffe005862dce8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d12cc0 [vmdaemon] 8 0 0 0 RL (threaded) [pagedaemon] 100077 RunQ [dom0] 100080 D launds 0xffffffff83cf8d94 [laundry: dom0] 100081 D umarcl 0xffffffff81e11320 [uma] 7 0 0 0 RL [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff843b9f20 [pf purge] 5 0 0 0 DL waiting 0xffffffff8467c700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838ee340 [doneq0] 100046 D - 0xffffffff838ee2c0 [async] 100075 D - 0xffffffff838ee140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cf4660 [crypto] 100043 D crypto_ 0xfffffe0053ee4d30 [crypto returns 0] 100044 D crypto_ 0xfffffe0053ee4d80 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b54640 [g_event] 100038 D - 0xffffffff83b54660 [g_up] 100039 D - 0xffffffff83b54680 [g_down] 2 0 0 0 LL (threaded) [clock] 100031 L *tun_mtx 0xfffffe00079fa000 [clock (0)] 100032 I [clock (1)] 12 0 0 0 RL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 RunQ [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 RunQ [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83cf5100 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c48ff0 [swapper] 100005 D - 0xfffffe0053ea0100 [softirq_0] 100006 D - 0xfffffe0053ea0000 [softirq_1] 100007 D - 0xfffffe0053e9fe00 [if_io_tqg_0] 100008 D - 0xfffffe0053e9fd00 [if_io_tqg_1] 100009 D - 0xfffffe0053e9fc00 [if_config_tqg_0] 100010 D - 0xfffffe000776eb00 [kqueue_ctx taskq] 100011 D - 0xfffffe000776ea00 [jail_remove taskq] 100012 D - 0xfffffe000776e900 [bus taskq] 100015 D - 0xfffffe000776e600 [thread taskq] 100017 D - 0xfffffe000776e400 [aiod_kick taskq] 100018 D - 0xfffffe000776e300 [deferred_unmount ta] 100019 D - 0xfffffe000776e200 [inm_free taskq] 100020 D - 0xfffffe000776e100 [in6m_free taskq] 100021 D - 0xfffffe000776e000 [linuxkpi_irq_wq] 100022 D - 0xfffffe000776de00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe000776de00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe000776de00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe000776de00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe000776dd00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe000776dd00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe000776dd00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe000776dd00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe000776db00 [firmware taskq] 100040 D - 0xfffffe000776da00 [crypto_0] 100041 D - 0xfffffe000776da00 [crypto_1] 100056 D - 0xfffffe0057de6e00 [vtnet0 rxq 0] 100057 D - 0xfffffe0057de6d00 [vtnet0 txq 0] 100058 D - 0xfffffe0057de6c00 [vtnet0 rxq 1] 100059 D - 0xfffffe0057de6b00 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057de0380 [virtio_balloon] 100065 D - 0xffffffff82809161 [deadlkres] 100069 D - 0xfffffe00593fd500 [acpi_task_0] 100070 D - 0xfffffe00593fd500 [acpi_task_1] 100071 D - 0xfffffe00593fd500 [acpi_task_2] 100073 D - 0xfffffe000776ec00 [mca taskq] 100074 D - 0xfffffe000776d800 [CAM taskq] 100076 D - 0xfffffe00593fd400 [ipsec_offload] db> show all locks Process 819 (ifconfig) thread 0xfffffe005409d780 (100132) exclusive sx tun_ioctl (tun_ioctl) r = 0 (0xffffffff83ccba40) locked @ /syzkaller/managers/i386/kernel/sys/net/if_tuntap.c:1387 exclusive sx in_control (in_control) r = 0 (0xffffffff83cce660) locked @ /syzkaller/managers/i386/kernel/sys/netinet/in.c:367 Process 802 (syz-executor) thread 0xfffffe005409f000 (100126) exclusive sleep mutex tun_mtx (tun_mtx) r = 0 (0xfffffe0059693808) locked @ /syzkaller/managers/i386/kernel/sys/net/if_tuntap.c:1688 Process 766 (syz-executor) thread 0xfffffe005404b000 (100086) exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007ce0540) locked @ /syzkaller/managers/i386/kernel/sys/ufs/ffs/ffs_softdep.c:14492 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006df98c78) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_subr.c:3386 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006df99908) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_cache.c:4844 Process 2 (clock) thread 0xfffffe000781a780 (100031) exclusive sleep mutex mld_mtx (mld_mtx) r = 0 (0xffffffff83cefd80) locked @ /syzkaller/managers/i386/kernel/sys/netinet6/mld6.c:1349 exclusive sleep mutex in6_multi_list_mtx (in6_multi_list_mtx) r = 0 (0xffffffff83cefba0) locked @ /syzkaller/managers/i386/kernel/sys/netinet6/mld6.c:1348 shared rw vnet_rwlock (vnet_rwlock) r = 0 (0xffffffff83ccdde0) locked @ /syzkaller/managers/i386/kernel/sys/netinet6/mld6.c:1307 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 377 5124K 487 tcp_hpts 7 4801K 7 devbuf 4187 4324K 4212 sysctloid 35242 2076K 35317 vtbuf 24 1968K 46 kobj 331 1324K 495 newblk 313 1102K 349 vfscache 3 1025K 3 pcb 24 669K 54 inodedep 68 538K 96 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 123 250K 891 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 100 200K 100 acpica 1674 184K 54444 vmem 5 144K 6 tidhash 3 141K 3 pagedep 21 133K 29 tfo_ccache 1 128K 1 IP reass 1 128K 1 filedesc 16 121K 75 sem 4 106K 4 DEVFS1 106 106K 123 gtaskqueue 18 98K 18 bus 1000 82K 5086 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 523 66K 523 ddb_capture 1 64K 1 kdtrace 188 37K 968 umtx 288 36K 288 hostcache 1 32K 1 shm 1 32K 1 DEVFS3 125 32K 135 msg 4 30K 4 kbdmux 6 28K 6 temp 32 21K 1830 DEVFS_RULE 56 20K 56 ifaddr 67 19K 69 BPF 14 19K 14 ufs_mount 4 17K 5 proc 3 17K 3 LRO 16 17K 16 tty 16 16K 16 routetbl 124 16K 395 ithread 90 15K 90 bus-sc 34 15K 1657 eventhandler 163 14K 163 lltable 43 14K 43 ifnet 7 13K 7 ether_multi 152 13K 162 kenv 95 12K 95 GEOM 49 11K 431 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 bmsafemap 4 9K 62 plimit 23 9K 332 cred 23 9K 182 in6_multi 65 9K 65 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 shmfd 1 8K 1 pfs_vncache 1 8K 1 audit_evclass 240 8K 306 taskqueue 69 8K 69 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 24 dirrem 18 5K 43 UMA 269 5K 269 pf_ifnet 10 5K 19 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 diradd 32 4K 58 evdev 4 4K 4 kqueue 57 4K 827 pwddesc 56 4K 825 acpisem 28 4K 28 selfd 45 3K 5933 DEVFSP 45 3K 50 terminal 11 3K 11 proc-args 83 3K 1865 session 21 3K 32 indirdep 10 3K 10 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 uidinfo 3 3K 8 lockf 22 3K 34 kcovinfo 36 3K 36 netlink 2 3K 70 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 CC Mem 16 2K 29 mkdir 15 2K 38 ip6ndp 12 2K 13 Unitno 30 2K 50 sctp_ifa 13 2K 14 CAM XPT 22 2K 543 in_multi 6 2K 8 tun 4 2K 4 toponodes 6 2K 6 newdirblk 11 2K 19 ipsecpolicy 2 2K 2 select 10 2K 30 msi 9 2K 9 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 8 NFSD session 1 1K 1 inpcbpolicy 28 1K 188 CAM periph 4 1K 271 osd 21 1K 46 ipsec 3 1K 3 sctp_ifn 6 1K 14 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 89 pci_link 10 1K 10 crypto 4 1K 7 encap_export_host 12 1K 12 cdev 2 1K 2 lkpikmalloc 8 1K 9 counter_rate 13 1K 13 chacha20random 1 1K 1 biobuf 1 1K 1 freework 2 1K 30 freeblks 1 1K 29 ip6opt 1 1K 4 vnodes 1 1K 1 procdesc 2 1K 8 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 cryptodev 3 1K 42 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 freefile 1 1K 14 aio 4 1K 4 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 3318 filecaps 4 1K 70 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 32 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 tcp_pcm_rack 0 0K 0 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 0 mqdata 0 0K 0 filemon 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 12 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 0 sctp_atky 0 0K 0 sctp_atcl 0 0K 0 sctp_a_it 0 0K 12 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 pf_table 0 0K 0 pf 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 16 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 2 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 6 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6_msource 0 0K 0 ip6_moptions 0 0K 0 in6_mfilter 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 2 in_mfilter 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 19 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 181 namei_tracker 0 0K 0 inotify 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 7 lio 0 0K 0 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 iov 0 0K 13565 ioctlops 0 0K 96 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 190 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 648 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 cache 0 0K 0 jaildesc 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 ufshci 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 11749 0 254 38494208 0 mbuf 256 8611 1051 13605 0 254 2473472 0 BUF TRIE 152 204 11600 398 0 62 1794208 0 malloc-384 384 4139 31 4150 0 30 1601280 0 malloc-128 128 11584 134 11596 0 126 1499904 0 malloc-4096 4096 334 2 577 0 2 1376256 0 UMA Slabs 0 112 10898 4 10898 0 126 1221024 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 RADIX NODE 152 5920 185 25913 0 62 927960 0 malloc-65536 65536 13 1 16 0 1 917504 0 vmem btag 56 15886 137 15886 0 254 897288 0 tcp_log 416 693 1341 2801 0 254 846144 0 FFS inode 1168 533 20 548 0 8 645904 0 pbuf 2624 0 202 0 0 2 530048 0 socket 1024 40 468 1385 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 VM OBJECT 248 1121 63 13362 0 62 293632 0 256 Bucket 2048 118 18 985 0 8 278528 0 malloc-4096 4096 62 4 830 0 2 270336 0 THREAD 1860 131 13 143 0 8 267840 0 VNODE 440 569 34 586 0 30 265320 0 malloc-64 64 3868 227 3872 0 254 262080 0 malloc-2048 2048 107 13 348 0 8 245760 0 malloc-16 16 14521 229 14591 0 254 236000 0 DEVCTL 1024 20 200 147 0 0 225280 0 UMA Zones 768 241 3 241 0 16 187392 0 malloc-32 32 5340 330 5384 0 254 181440 0 malloc-16384 16384 7 4 35 0 1 180224 0 malloc-128 128 1225 170 25569 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 11 505 1171 0 254 165120 0 FFS2 dinode 256 533 97 547 0 62 161280 0 malloc-1024 1024 117 27 301 0 16 147456 0 MAP ENTRY 96 1265 121 41606 0 126 133056 0 malloc-65536 65536 0 2 58 0 1 131072 0 malloc-65536 65536 0 2 110 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 1 1 9 0 1 131072 0 mbuf_packet 256 0 508 132 0 254 130048 0 S VFS Cache 104 995 175 1044 0 126 121680 0 FPU_save_area 832 133 11 155 0 16 119808 0 ksiginfo 112 49 995 68 0 126 116928 0 malloc-128 128 700 199 3962 0 126 115072 0 malloc-256 256 376 59 536 0 62 111360 0 malloc-128 128 649 126 1260 0 126 99200 0 malloc-32768 32768 3 0 3 0 1 98304 0 malloc-32768 32768 2 1 13 0 1 98304 0 PROC 1368 55 11 823 0 8 90288 0 malloc-8192 8192 9 2 92 0 1 90112 0 UMA Kegs 384 228 5 228 0 30 89472 0 g_bio 408 0 210 4801 0 30 85680 0 128 Bucket 1024 43 40 246 0 16 84992 0 malloc-16384 16384 5 0 6 0 1 81920 0 malloc-4096 4096 15 5 211 0 2 81920 0 malloc-2048 2048 6 34 1038 0 8 81920 0 filedesc0 1072 56 14 825 0 8 75040 0 malloc-64 64 800 271 2393 0 254 68544 0 malloc-64 64 649 422 7588 0 254 68544 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-8192 8192 8 0 9 0 1 65536 0 malloc-1024 1024 26 38 557 0 16 65536 0 64 Bucket 512 69 59 1662 0 30 65536 0 malloc-256 256 165 90 844 0 62 65280 0 malloc-256 256 149 106 536 0 62 65280 0 malloc-256 256 177 78 242 0 62 65280 0 malloc-384 384 109 41 470 0 30 57600 0 malloc-4096 4096 12 2 495 0 2 57344 0 32 Bucket 256 62 133 633 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 0 48 12654 0 16 49152 0 malloc-16384 16384 1 2 191 0 1 49152 0 da_ccb 544 0 84 1291 0 16 45696 0 syncache 168 0 264 3 0 254 44352 0 tcp_inpcb 1304 17 16 29 0 8 43032 0 pcpu-8 8 4713 407 4869 0 254 40960 0 VMSPACE 584 35 35 805 0 16 40880 0 pipe 736 20 35 289 0 16 40480 0 udp_inpcb 408 8 82 150 0 30 36720 0 malloc-64 64 22 545 13447 0 254 36288 0 malloc-64 64 30 537 50 0 254 36288 0 malloc-64 64 214 353 1019 0 254 36288 0 malloc-64 64 65 502 907 0 254 36288 0 malloc-128 128 19 260 162 0 126 35712 0 malloc-128 128 5 274 26 0 126 35712 0 malloc-128 128 121 158 588 0 126 35712 0 malloc-128 128 28 251 288 0 126 35712 0 routing nhops 256 26 109 33 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-384 384 72 18 81 0 30 34560 0 malloc-384 384 73 17 73 0 30 34560 0 malloc-256 256 27 108 511 0 62 34560 0 malloc-256 256 5 130 61 0 62 34560 0 malloc-256 256 47 88 207 0 62 34560 0 malloc-256 256 17 118 281 0 62 34560 0 malloc-2048 2048 9 7 26 0 8 32768 0 malloc-2048 2048 3 13 48 0 8 32768 0 malloc-2048 2048 9 7 32 0 8 32768 0 malloc-2048 2048 8 8 8 0 8 32768 0 malloc-1024 1024 3 29 43 0 16 32768 0 malloc-1024 1024 17 15 994 0 16 32768 0 malloc-1024 1024 3 29 8 0 16 32768 0 malloc-1024 1024 2 30 2 0 16 32768 0 malloc-512 512 0 64 110 0 30 32768 0 malloc-512 512 12 52 17 0 30 32768 0 malloc-512 512 0 64 14 0 30 32768 0 malloc-512 512 2 62 49 0 30 32768 0 malloc-512 512 10 54 30 0 30 32768 0 malloc-512 512 2 62 8 0 30 32768 0 malloc-512 512 3 61 4 0 30 32768 0 pcpu-64 64 501 11 501 0 254 32768 0 ttyinq 160 135 65 300 0 62 32000 0 Files 80 177 223 6827 0 126 32000 0 PGRP 120 25 239 36 0 126 31680 0 sctp_laddr 48 0 588 12 0 254 28224 0 malloc-32 32 352 530 4186 0 254 28224 0 16 Bucket 144 50 146 246 0 62 28224 0 4 Bucket 48 5 583 6 0 254 28224 0 AIO 208 3 130 5 0 62 27664 0 TURNSTILE 136 145 44 145 0 62 25704 0 cpuset 200 7 121 7 0 62 25600 0 malloc-8192 8192 3 0 3 0 1 24576 0 malloc-4096 4096 3 3 43 0 2 24576 0 ertt_txseginfo 40 0 606 164 0 254 24240 0 PWD 40 18 588 103 0 254 24240 0 rtentry 168 29 115 33 0 62 24192 0 8 Bucket 80 40 260 269 0 126 24000 0 malloc-384 384 1 59 2 0 30 23040 0 malloc-384 384 12 48 12 0 30 23040 0 malloc-384 384 25 35 527 0 30 23040 0 ripcb 376 4 56 9 0 30 22560 0 Mountpoints 2816 2 6 2 0 4 22528 0 SLEEPQUEUE 88 145 111 145 0 126 22528 0 clpbuf 2624 0 8 15 0 4 20992 0 hostcache 64 1 314 1 0 254 20160 0 ertt 72 16 264 29 0 126 20160 0 malloc-64 64 3 312 3 0 254 20160 0 malloc-32 32 71 559 373 0 254 20160 0 malloc-32 32 16 614 105 0 254 20160 0 malloc-32 32 154 476 1347 0 254 20160 0 malloc-32 32 60 570 86 0 254 20160 0 malloc-32 32 125 505 133 0 254 20160 0 malloc-32 32 16 614 20 0 254 20160 0 2 Bucket 32 52 578 330 0 254 20160 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 0 2 19 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 1 3 6 0 2 16384 0 malloc-2048 2048 0 8 12 0 8 16384 0 malloc-2048 2048 2 6 2 0 8 16384 0 malloc-1024 1024 0 16 1 0 16 16384 0 malloc-1024 1024 2 14 6 0 16 16384 0 malloc-512 512 2 30 2 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 malloc-16 16 507 493 3397 0 254 16000 0 tcp_log_id_node 120 1 131 1 0 126 15840 0 kenv 258 17 43 1066 0 30 15480 0 mqnode 416 3 33 3 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 tcp_log_id_bucket 176 1 68 1 0 62 12144 0 KNOTE 160 0 75 8 0 62 12000 0 malloc-16 16 40 710 1382 0 254 12000 0 malloc-16 16 10 740 15 0 254 12000 0 malloc-16 16 41 709 98 0 254 12000 0 malloc-16 16 55 695 25039 0 254 12000 0 malloc-16 16 15 735 16 0 254 12000 0 malloc-16 16 7 743 9 0 254 12000 0 cryptop 280 0 42 1 0 30 11760 0 AIOCB 552 1 20 2 0 16 11592 0 malloc-384 384 1 29 2 0 30 11520 0 malloc-8192 8192 0 1 26 0 1 8192 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-4096 4096 0 2 4 0 2 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 vtnet_tx_hdr 24 0 334 738 0 254 8016 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 splice 184 0 0 0 0 62 0 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf Ethernet anchors 1240 0 0 0 0 64 0 0 pf anchors 1664 0 0 0 0 64 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_bbr_pcb 896 0 0 0 0 16 0 0 tcp_bbr_map 128 0 0 0 0 126 0 0 tcp_rack_pcb 1088 0 0 0 0 8 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 sctp_raddr 736 0 0 0 0 254 0 0 sctp_asoc 2256 0 0 0 0 254 0 0 sctp_ep 1152 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 udplite_inpcb 408 0 0 0 0 30 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 itimer 352 0 0 0 0 30 0 0 AIOLIO 272 0 0 0 0 30 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 L VFS Cache 320 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 rl_entry 48 0 0 0 0 254 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-4096 4096 0 0 0 0 2 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl