last executing test programs: 3.389816713s ago: executing program 0 (id=274): r0 = semget$private(0x0, 0x6, 0x583) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmat(0x0, &(0x7f0000002000/0x2000)=nil, 0x3000) semop(r0, &(0x7f0000000080)=[{0x5, 0x7fff, 0x800}, {0x1, 0x200, 0x1000}, {0x3, 0x9}, {0x3, 0x1, 0x1800}, {0x0, 0xc23}, {0x3, 0x9, 0x1800}, {0x2, 0x8, 0x800}, {0x4, 0x2, 0x1800}, {0x0, 0x3, 0x2800}, {0x3}, {0x2, 0xd795, 0x800}, {0x4, 0x5, 0x800}, {0x4, 0x0, 0x800}, {0x3, 0x3, 0x800}, {0x0, 0xb, 0x1000}], 0xf) procctl$PROC_TRAPCAP_CTL(0x2, 0x0, 0x9, &(0x7f0000001780)=0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = semget(0x0, 0x4, 0x82) __semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x1, 0x2, 0x7]) 3.354912734s ago: executing program 1 (id=276): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) r1 = socket(0x10, 0x3, 0x6) sendto(r1, &(0x7f0000000180)="5a460e5dc1347bc0120b555a61813dd352393a2e1209a326cdbe5d9a73ee7c14b5a394d80e80c1b2964e48207cf97f2c05806c3034e980626a5319366e5d66d4b3af45a5d3376ecb2c590f79ab6cc600cbb401dfca725aac39", 0x59, 0x8, &(0x7f0000000200)=@in={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000000)={0x0, 0x18, 0x0, 0x0, 0x20, &(0x7f00000003c0)="70638953df0cef7e00080000000bf98994164394b5d947fa8802ca13b7270000", 0x10000, 0xbdfffffd, [0x0, 0x3]}) socket$bt_sco(0x24, 0x5, 0x89) socket(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_MODE(r2, 0x6, 0x28, &(0x7f0000000100)=0x2, 0x4) 3.299847729s ago: executing program 3 (id=277): open$dir(&(0x7f0000000000)='./file0\x00', 0x10210, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r1, 0x0) close(r0) accept(r1, 0x0, 0x0) dup2(r0, r1) rfork(0x85000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000040)="c1", 0xfe41) flock(r3, 0x4) msgrcv(0x0, 0x0, 0x0, 0x2, 0x800) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x10, 0x2, 0x2, @multicast2}, 0x10) ioctl$BIOCSHDRCMPLT(r4, 0x80044275, &(0x7f0000000180)=0x7) r6 = kqueue() kevent(r6, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x2, 0x7, 0x3ffffffffffffd]}, {0x401, 0xfffffffffffffff9, 0x4080, 0x1, 0x0, 0xd, [0xb, 0x7fffffffffffffff, 0x6f8, 0x8000000000000000]}], 0x2, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r8, 0x6, 0x29, &(0x7f0000000280)={&(0x7f0000000040)="01", &(0x7f0000000140)="7cadbf", 0x0, 0x19, 0x1, 0x3, 0x1c, 0x0, 0x0, 0x3, 0x3, "2e090000ffffffe0"}, 0x40) r9 = socket(0x1c, 0x1, 0x0) listen(r9, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r10, 0x16, &(0x7f0000000080)={0x570}) ioctl$DIOCOSFPGET(r7, 0xc0884450, &(0x7f00000002c0)="79796c2fc25368f857e6a9e2d12dfc22eb93acfe3133cd4b65211bf3f988c0479f5661d28a07ec7e118be53bac64f1887c8c8291c918bafaba0da32bf71759af4b1ad619503ace774ec67c7395e033f745") ppoll(0x0, 0x0, 0x0, 0x0, 0x0) semget(0x2, 0x2, 0x682) shutdown(r2, 0x0) freebsd11_fstat(r2, &(0x7f0000000200)) 3.179897063s ago: executing program 1 (id=279): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="1f", 0x4000}], 0x1) freebsd11_fstat(r0, &(0x7f0000002100)) r2 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x57, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ae029d00213aff780420000000140000010000058b6500ff0200000000000000000000000000018800907800000000fe80000000000000000000000000aa040151e1a3a4ae15ea00"]) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f00000000c0)={0x15, 0xf, 0x18, &(0x7f0000000080)="000000000000d40b0000000000000017b670f5e6613250d5", 0x0, 0x0, 0x0, 0xfdfeffff}) ioctl$CIOCCRYPTAEAD(r3, 0xc040636d, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, 0x400010, 0x0, 0x0, 0x0, &(0x7f00000025c0), &(0x7f00000001c0)}) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000280)={'rack\x00', 0x3}, 0x24) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x1, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c) sendto(r2, &(0x7f0000000100)="b9d5cf29033fda9f0d47f1", 0xb, 0x100, &(0x7f00000002c0)=@un=@file={0x2}, 0x2) 2.777250211s ago: executing program 3 (id=282): r0 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) (async) r1 = socket(0x1c, 0x1, 0x0) (async) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0x62, 0x1c, 0x3, 0xfffffffb, @loopback}, 0x1c) r3 = open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) flock(r3, 0x1) (async) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x400, 0x876e83478a757fe4) fcntl$lock(r4, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x58, 0x1000301010005}) (async) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r5, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000301010005}) (async) open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x10000}) (async) flock(r3, 0x8) (async) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) (async) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) (async) r6 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40, 0x53fde52cbedacd47) ioctl$MDIOCDETACH(0xffffffffffffff9c, 0xc1b46d01, 0x0) (async) ioctl$BIOCSETWF(r6, 0x8010427b, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x0, 0x96, 0x2e, 0x4}]}) (async) sigaction(0x14, &(0x7f0000000000)={0x0, 0x1f, {[0x0, 0x0, 0x80000001, 0xc]}}, 0x0) (async, rerun: 64) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x33, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x18) (async, rerun: 64) sigaction(0x14, 0x0, &(0x7f00000001c0)={0x0}) rtprio_thread(0x1, 0x0, &(0x7f0000000000)={0x2}) (async) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6036ea0700303a0000000000000000000000000000000000fe8000000000000000000000000000aa04019078fffeffff66e7027800060600af7c484adcebf51b740e67010c6c47deff020000000000000000000100000000"]) (async) rtprio(0x1, 0x0, &(0x7f0000000040)={0x2}) (async) freebsd11_mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) r7 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) readv(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/159, 0x9f}], 0x1) (async) rfork(0x85000) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.729651754s ago: executing program 3 (id=284): setuid(0xffffffffffffffff) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket(0x1c, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x8, 0x1c}, 0x1c) r1 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) semop(0x0, &(0x7f0000000140)=[{0x2, 0x401, 0xe5ce97ab354d96be}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) utimensat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x6200) 2.679803014s ago: executing program 2 (id=285): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\xc1\xed\xac\xa8\x95\xb8\x99\xe7\x1c', &(0x7f0000000140)="60029ba40b17654701378516e4cde5beff4bb49b7f4a8eb42a6a810a8c7c6e776f226944f21879f180273e20f55c32d5fb000000000000000088fe71ed14272651c3629a468bf96f81", 0xff22) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0xfffffffffffffffc) ftruncate(r0, 0x41f3) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0xff00000000000000) 2.678818507s ago: executing program 3 (id=286): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x3, @loopback}, 0x10) r1 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN(r1, 0x6, 0x401, &(0x7f0000000180)={0x3000, "8113a1b0683be996f22e9e9fd8baac7e"}, 0x14) connect$inet(r1, &(0x7f0000000240)={0x10, 0x2, 0x1, @remote={0xac, 0x14, 0x0}}, 0x10) shutdown(r1, 0x2) ktimer_create(0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x47, &(0x7f0000000200)=0x3, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2, 0x3, @rand_addr=0x2}, 0x10) recvfrom$inet(r3, 0x0, 0x2d, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb}, 0xb) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCATTACH(r4, 0xc1c06d00, &(0x7f0000000780)={0x0, 0x2, 0x0, 0x0, 0x10001, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffe, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9]}) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={@in={{0x10, 0x2, 0x0}}, 0x0, 0x200, 0x0, 0x1, 0x5, 0x7}, 0x98) 2.471826134s ago: executing program 0 (id=287): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) r1 = socket(0x10, 0x3, 0x6) sendto(r1, &(0x7f0000000180)="5a460e5dc1347bc0120b555a61813dd352393a2e1209a326cdbe5d9a73ee7c14b5a394d80e80c1b2964e48207cf97f2c05806c3034e980626a5319366e5d66d4b3af45a5d3376ecb2c590f79ab6cc600cbb401dfca725aac39", 0x59, 0x8, &(0x7f0000000200)=@in={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000000)={0x0, 0x18, 0x0, 0x0, 0x20, &(0x7f00000003c0)="70638953df0cef7e00080000000bf98994164394b5d947fa8802ca13b7270000", 0x10000, 0xbdfffffd, [0x0, 0x3]}) socket$bt_sco(0x24, 0x5, 0x89) socket(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_MODE(r2, 0x6, 0x28, &(0x7f0000000100)=0x2, 0x4) 2.249937375s ago: executing program 2 (id=288): r0 = socket(0x1c, 0x10000000, 0x40) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f00000001c0)={'bbr\x00'}, 0x24) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, &(0x7f00000000c0)="c3", 0xffffffed) execve(0x0, 0x0, 0x0) read(r2, &(0x7f0000000400)=""/119, 0xfd4c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0x1000000}, 0x1c) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xa, &(0x7f00000000c0), 0x4) getsockopt$inet6_buf(r3, 0x29, 0x4a, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r4 = semget(0x1, 0x3, 0xa4) setlogin(&(0x7f0000000040)="061f54e6c11a6d68b6f47e8a331b6fa50d4a5de2c49bd20e9340048a0322817596") __semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000040)) 2.046045821s ago: executing program 1 (id=289): r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) fcntl$lock(0xffffffffffffffff, 0x16, &(0x7f0000000140)={0x570, 0x0, 0x0, 0xfffffffffffffffc}) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget(0x1, 0x1000, 0x6, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008) ktimer_create(0x4, 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = kqueue() fork() r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f00000004c0)={r3, 0x80000001, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) aio_waitcomplete(&(0x7f0000000300)=0x0, &(0x7f0000000340)) ioctl$CIOCCRYPT(0xffffffffffffffff, 0xc0306367, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x10000, &(0x7f0000000100), 0x0, 0x0, 0x0}) r4 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r4, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @ipv4}, 0x1c) bind$inet6(r4, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0x401, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20040207fffffdc, 0x400000000000001]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kevent(r2, &(0x7f0000000000), 0x100f2, 0x0, 0xfc, 0x0) r5 = fork() procctl$PROC_TRACE_CTL(0x2, r5, 0x7, &(0x7f0000000100)=0xc8ad) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/252) 2.045389687s ago: executing program 0 (id=290): r0 = socket(0x1c, 0x1, 0x0) r1 = socket(0x1c, 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fpathconf(r3, 0x3b) getsockname(r1, &(0x7f0000000000)=@in={0x10, 0x2, 0xffffffffffffffff, @local}, &(0x7f0000000080)=0x10) syz_emit_ethernet(0x400e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "15f2ff", 0x3a3a, 0x0, 0x0, @rand_addr="eee7567b2c0e280000004c1e7b3b003b", @local={0xfe, 0x80, '\x00', 0x0}}}}}) open$dir(&(0x7f00000000c0)='./file0\x00', 0xd6dfe06bdea017f9, 0x141) r4 = dup2(0xffffffffffffffff, r2) open$dir(&(0x7f0000000080)='./file0\x00', 0x4e50, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={{0x0, 0xffffffffffffffff}, {0x0, 0xffffffffffffffff}}, 0x0) ioctl$CIOCGSESSION2(r4, 0xc030636a, &(0x7f0000000040)={0xb, 0x0, 0x10, &(0x7f0000000180)="0070c65142bfdb626a5686aaf6f3dc83", 0x0, 0x0, 0x0, 0x4d46b770, [0x80, 0x60, 0x0, 0x2]}) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) r5 = socket$inet6(0x1c, 0x2, 0x0) sendmsg$inet6_sctp(r5, &(0x7f0000000480)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x1, 0x1, @local={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x2008d}, 0x0) 1.752561186s ago: executing program 0 (id=291): r0 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x9e) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) chflagsat(r0, &(0x7f0000000000)='./file1\x00', 0x1, 0x400) lseek(r0, 0x7da, 0x4) ioctl$DIOCSETIFFLAG(0xffffffffffffff9c, 0xc0284459, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2, 0xfffffffd}) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0802450000ca5e0d5c52497692d71c0000000001029078ac1400bbac1400"]) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) aio_readv(&(0x7f0000000140)={r1, 0x0, &(0x7f0000000040)="04e3", 0x2, [], 0x0, 0x0, 0x9, {0x0, 0x0, 0x0}, {0x0, 0x0, @sigval_ptr=0x200}}) 1.630045604s ago: executing program 3 (id=292): open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) rfork(0x3060) rfork(0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x20, 0x0) (async) open$dir(&(0x7f0000000200)='./file0\x00', 0x20, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0xb, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100000002}) 1.62957702s ago: executing program 2 (id=293): setresuid(0x0, 0xee01, 0xee00) ioctl$DIOCSETIFFLAG(0xffffffffffffffff, 0xc0284459, 0x0) r0 = socket(0x1c, 0x1, 0x0) ktimer_create(0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x3, @loopback, 0x1}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000000)=ANY=[], 0x1010) sendto(r0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) 1.56994048s ago: executing program 2 (id=294): setuid(0xffffffffffffffff) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket(0x1c, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x8, 0x1c}, 0x1c) r1 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) utimensat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x6200) 1.404257334s ago: executing program 2 (id=295): r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, &(0x7f0000000980)={'rack\x00'}, 0x24) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000001680)={0xffffffffffffff2e, 0x2, 0x0, @rand_addr=0x4}, 0x10) sendto(r0, &(0x7f0000000040)="c7f96f3a70f6241caa635441b761f1846cdac14d64c0550017c5589483dede5eb9e527a7afbe409c39cef24628947211ab46c3666c379de611d44eb3a23097138c9abae0f8bc9024e5490e721c8280b91b840f40f54c57a6a62bf6762ebce3d0d6ec6ab33040d9212191b018379c2fb14e44b1b999d8f10f5c2e57c86ecc2644857da68031a0ae27f8df95c672682a01c7255eebd30a0d8fd830e549556780d680dcfdbe314edbde49858a4c689f903d70b4f4546984dd9b404cee6614d50064e3065e67b88ff8c5725bb87a6648d887adb084840538", 0xd6, 0x1, &(0x7f0000000140)=@un=@abs={0x8, 0x1, 0x0, 0x3}, 0x8) shutdown(r0, 0x1) aio_readv(&(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @ke_flags}}) r1 = fork() fork() setsid() fork() getsid(r1) wait4(r1, 0x0, 0x4, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x13, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="02"], 0x9) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./file1\x00', 0x9cab835cfdc52675, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r3, 0x0) ftruncate(r3, 0x79c8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r5 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$FILEMON_SET_FD(r5, 0xc0045301, &(0x7f0000000080)=r4) rfork(0x1000) shutdown(r0, 0x1) 1.190049115s ago: executing program 1 (id=296): setrlimit(0xf, &(0x7f0000000340)={0x5, 0xe}) freebsd10_pipe(0x0) cpuset_getid(0x1, 0x3, 0x0, &(0x7f0000000280)) 1.140042744s ago: executing program 1 (id=297): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fstatat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x4400) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={@in6={{0x1c, 0x1c, 0x2, 0x9, @remote={0xfe, 0x80, '\x00', 0x0}}}}, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x58, 0x1000301010005}) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x1000301010005}) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) fcntl$lock(r5, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) flock(r1, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF32(r0, 0x80084267, &(0x7f0000000040)={0x6, 0x38}) 859.977053ms ago: executing program 1 (id=298): socket$inet6_sctp(0x1c, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000003c0)=[{0xffffffffffffffff, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}, {0x7fff, 0xfffffffffffffff8, 0x0, 0x2, 0x3, 0xfffffffffffffffc, [0xf37, 0x4, 0x10, 0xdba2]}, {0x4f, 0xfffffffffffffffa, 0x4020, 0x4, 0x1, 0x7fffffffffffffff, [0x3ff, 0x7, 0x100000000]}, {0x0, 0xfffffffffffffffb, 0x2, 0x10, 0x858a, 0x8000000000000001, [0x0, 0x2, 0x822, 0xfffffffffffffffd]}, {0x4, 0xfffffffffffffffc, 0x80bd, 0xc0000000, 0x3, 0x7, [0x4, 0xf3b3, 0x8001, 0x3]}], 0x5, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) ioctl$BIOCFEEDBACK(0xffffffffffffffff, 0x8004427c, &(0x7f00000001c0)=0x4) freebsd10_pipe(&(0x7f0000000080)) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000440)={0x19, 0x0, 0x10, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505", 0x0, 0x0, 0x0, 0xfdffffff}) ioctl$CIOCCRYPT(r2, 0xc0306367, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480), &(0x7f00000000c0)}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r3, 0x3862) r4 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r4, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200000, 0x28) sendfile(r5, 0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x14) open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x181) 859.687085ms ago: executing program 0 (id=299): r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCATTACH(r0, 0xc1c06d00, &(0x7f0000000780)={0x0, 0x2, 0x0, 0x0, 0x9, 0x800008, 0x6, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffe, 0x4, 0x0, 0x1ff, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x3, 0x100000, 0x0, 0xf22, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x100, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffff6]}) 821.932767ms ago: executing program 0 (id=300): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000000)=0x6, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000340)=@in6={0x1c, 0x1c, 0x3, 0x800000, @local={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f00000002c0)=@file={0xa, 0x0, './file1\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x20085}, 0x20100) 679.936833ms ago: executing program 3 (id=301): r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x2, 0x0, @loopback={0x1000000}}, {0x1c, 0x1c, 0x0, 0x0, @rand_addr="f57799109f9cc24cb1b9a9bab803227d"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}, 0x5c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) cpuset_setdomain(0x2, 0x9, 0xffffffff, 0x20, &(0x7f00000001c0)={[0x1]}, 0x2) socket(0x1c, 0x4, 0xd3) 0s ago: executing program 2 (id=302): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) chflags(&(0x7f0000000140)='./file0\x00', 0x110002) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x20011, r0, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r1, 0x6, 0x27, &(0x7f00000004c0)={&(0x7f0000000040)="ef", 0x0, &(0x7f00000006c0)="3eff54", 0x19, 0x1, 0x0, 0x1c, 0x3, 0x0, 0x3, 0x2, "57c20c5309d9a863"}, 0x40) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100, 0x823c4dcaf5e9b72e) bindat(r2, r0, &(0x7f0000000080)=@un=@abs={0x8, 0x1, 0x0, 0x1}, 0x8) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x6000000, 0x0, 0x0, 0x0, 0xd0, 0x4, 0x35}, 0x8, 0x8, 0x0, 0x0, 0xfffe, 0x80, 0x3, 0x4}) r3 = __specialfd$eventfd(0x1, &(0x7f0000000000)={0x8000}, 0x8) poll(&(0x7f0000000040)=[{r3, 0x1}], 0x1, 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts. login: if_delmulti_locked: detaching ifnet instance 0xfffffe005a222000 vnode_pager_putpages: zero-length write at 0 resid 4096 0xfffffe006e6ef1b8: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83507180 usecount 4, writecount 3, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe0054917840 ref 1 pages 264 cleanbuf 33 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe0054906000 (pid 811, aiod4, tid 100125) nlink=1, effnlink=1, size=1048576, extsize 0 generation=e358a3e, uid=0, gid=0, flags=0x40008 ino 76, on dev gpt/rootfs FreeBSD/amd64 (ci-freebsd-main-7.us-central1-b.c.syzkaller.internal) (ttyu0) login: md0: truncating fractional last sector by 192 bytes pid 849 (syz-executor), jid 0, uid 0: exited on signal 8 (no core dump - too large) arp: requested protocol length != 4 pid 857 (syz-executor), jid 0, uid 0: exited on signal 8 (no core dump - too large) Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe0058d61800 if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd6000 pid 917 (syz-executor) is attempting to use unsafe AIO requests - not logging anymore arp: packet with unknown hardware format 0x00 received on tap3 arp: short packet received on tap2 if_delmulti_locked: detaching ifnet instance 0xfffffe005a222000 if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd6800 if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd6800 pid 1051 (syz-executor), jid 0, uid 0: exited on signal 4 (no core dump - too large) if_delmulti_locked: detaching ifnet instance 0xfffffe005a222000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058d61800 if_delmulti_locked: detaching ifnet instance 0xfffffe0008bd8000 arp: packet with unknown hardware format 0x19368 received on tap2 FreeBSD/amd64 (ci-freebsd-main-7.us-central1-b.c.syzkaller.internal) (ttyu0) login: if_delmulti_locked: detaching ifnet instance 0xfffffe005a222000 md2: truncating fractional last sector by 1 bytes Kernel page fault with the following non-sleepable locks held: exclusive sleep mutex tcphash (tcphash) r = 0 (0xfffffe0007fe7a70) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:2717 exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe006e712560) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_usrreq.c:1316 stack backtrace: #0 0xffffffff8161bb56 at witness_debugger+0x156 #1 0xffffffff8161e086 at witness_warn+0x876 #2 0xffffffff820d647f at trap_pfault+0x15f #3 0xffffffff820d5353 at trap+0x753 #4 0xffffffff8207cdd8 at calltrap+0x8 #5 0xffffffff819453e8 at in_pcbdrop+0x98 #6 0xffffffff819c16d7 at tcp_close+0x177 #7 0xffffffff819e805f at tcp_disconnect+0x1ef #8 0xffffffff819dfb09 at tcp_usr_close+0x189 #9 0xffffffff816a1da0 at soclose+0x3d0 #10 0xffffffff81413938 at _fdrop+0x58 #11 0xffffffff8141b1e5 at closef+0x655 #12 0xffffffff81419cbe at fdescfree+0xa5e #13 0xffffffff814435f0 at exit1+0x860 #14 0xffffffff81442d88 at sys_exit+0x28 #15 0xffffffff820d845f at amd64_syscall+0x4af #16 0xffffffff8207d6eb at fast_syscall_common+0xf8 Fatal trap 12: page fault while in kernel mode cpuid = 1; apic id = 01 fault virtual address = 0xffffffffffffffff fault code = supervisor write data, page not present FreeBSD/amd64 (ci-freebsd-main-7.us-central1-b.c.syzkaller.internal) (ttyu0) login: instruction pointer = 0x20:0xffffffff819432d3 stack pointer = 0x28:0xfffffe0057597540 frame pointer = 0x28:0xfffffe0057597570 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 1200 (syz-executor) rdi: fffffe006e712540 rsi: 0000000000000000 rdx: 00000000010080fe rcx: 0000000000000000 r8: 0000000000000000 r9: 0000000000000001 rax: ffffffffffffffff rbx: fffffe006e712584 rbp: fffffe0057597570 r10: 0000000000000000 r11: fffffe0054919520 r12: ffffffffffffffff r13: fffffe006e712790 r14: fffffe006e712540 r15: fffffe006e712548 trap number = 12 panic: page fault cpuid = 1 time = 1742775829 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0057596d70 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0057596ed0 vpanic() at vpanic+0x257/frame 0xfffffe0057597090 panic() at panic+0xb5/frame 0xfffffe0057597150 trap_pfault() at trap_pfault+0xab4/frame 0xfffffe0057597290 trap() at trap+0x753/frame 0xfffffe0057597470 calltrap() at calltrap+0x8/frame 0xfffffe0057597470 --- trap 0xc, rip = 0xffffffff819432d3, rsp = 0xfffffe0057597540, rbp = 0xfffffe0057597570 --- in_pcbremhash_locked() at in_pcbremhash_locked+0x263/frame 0xfffffe0057597570 in_pcbdrop() at in_pcbdrop+0x98/frame 0xfffffe0057597590 tcp_close() at tcp_close+0x177/frame 0xfffffe0057597660 tcp_disconnect() at tcp_disconnect+0x1ef/frame 0xfffffe0057597690 tcp_usr_close() at tcp_usr_close+0x189/frame 0xfffffe0057597770 soclose() at soclose+0x3d0/frame 0xfffffe0057597860 _fdrop() at _fdrop+0x58/frame 0xfffffe0057597890 closef() at closef+0x655/frame 0xfffffe0057597a70 fdescfree() at fdescfree+0xa5e/frame 0xfffffe0057597c50 exit1() at exit1+0x860/frame 0xfffffe0057597cf0 sys_exit() at sys_exit+0x28/frame 0xfffffe0057597d10 amd64_syscall() at amd64_syscall+0x4af/frame 0xfffffe0057597f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0057597f30 --- syscall (1, FreeBSD ELF64, exit), rip = 0x3a1d1a, rsp = 0x820733b08, rbp = 0x820733b10 --- KDB: enter: panic [ thread pid 1200 tid 100620 ] Stopped at kdb_enter+0x6e: movq $0,0x23e7777(%rip) db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe00033eee30 rdx 0 rbx 0xffffffff82750300 .str.27 rsp 0xfffffe0057596eb0 rbp 0xfffffe0057596ed0 rsi 0 rdi 0xffffffff815dbf19 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x17 r12 0xfffffe005492f000 r13 0xfffffffffffffffd r14 0xffffffff82750300 .str.27 r15 0 rip 0xffffffff815c689e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x23e7777(%rip) db> show proc Process 1200 (syz-executor) at 0xfffffe0054957000: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 764 at 0xfffffe0054804b00 ABI: FreeBSD ELF64 flag: 0x10002000 flag2: 0x40000 arguments: ./syz-executor exec reaper: 0xfffffe0008007040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe005490b000 (map 0xfffffe005490b000) (map.pmap 0xfffffe005490b0a0) (pmap 0xfffffe005490b110) threads: 1 100620 Run CPU 1 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 1200 764 764 0 RE CPU 1 syz-executor 1198 765 765 0 LE *tcphash 0xfffffe005493e600 syz-executor 1196 1 1192 0 S uwait 0xfffffe006eabf880 syz-executor 1195 1 766 0 S uwait 0xfffffe006e5e7580 syz-executor 1193 1 766 0 S uwait 0xfffffe006eabdc00 syz-executor 1191 1 765 0 S uwait 0xfffffe006eabf480 syz-executor 1189 1 765 0 S uwait 0xfffffe005a2d7000 syz-executor 1182 0 0 0 DL mdwait 0xfffffe0078147000 [md2] 1175 1 766 0 S uwait 0xfffffe006eabdf00 syz-executor 1117 1 765 0 S uwait 0xfffffe0059bbcc80 syz-executor 1110 1 1110 0 Ss+ ttyin 0xfffffe0058a7fcb0 getty 1109 1 1109 0 Ss+ ttyin 0xfffffe0059bd10b0 getty 1108 1 1108 0 Ss+ ttyin 0xfffffe0059bd14b0 getty 1107 1 1107 0 Ss+ ttyin 0xfffffe0059bd18b0 getty 1106 1 1106 0 Ss+ ttyin 0xfffffe0059bd1cb0 getty 1105 1 1105 0 Ss+ ttyin 0xfffffe0059bd34b0 getty 1104 1 1104 0 Ss+ ttyin 0xfffffe0059bd30b0 getty 1103 1 1103 0 Ss+ ttyin 0xfffffe0059bd38b0 getty 1102 1 1102 0 Ss+ ttyin 0xfffffe0059bd3cb0 getty 1099 1 767 0 S uwait 0xfffffe006e5e6800 syz-executor 1091 1 764 0 S uwait 0xfffffe006e5e6880 syz-executor 1085 0 0 0 DL mdwait 0xfffffe005a166000 [md7] 1057 1 765 0 S uwait 0xfffffe0077e6d380 syz-executor 1054 1 766 0 SV uwait 0xfffffe005a346a00 syz-executor 1052 1 766 0 S uwait 0xfffffe0077e6d580 syz-executor 1048 1 767 60928 S uwait 0xfffffe005a346600 syz-executor 1043 1 765 0 S uwait 0xfffffe005a2d8b00 syz-executor 1032 1 767 0 S uwait 0xfffffe006e5e6700 syz-executor 1031 1 767 0 S uwait 0xfffffe006eabf680 syz-executor 1022 1 764 0 SV uwait 0xfffffe006eabde00 syz-executor 1012 1 767 0 S uwait 0xfffffe0077e70400 syz-executor 1007 1 765 60928 S uwait 0xfffffe006eac0000 syz-executor 994 1 766 -1 S uwait 0xfffffe005a2d5a00 syz-executor 989 1 766 0 S uwait 0xfffffe0077e6d480 syz-executor 978 1 767 0 S uwait 0xfffffe005a346400 syz-executor 977 1 767 0 S uwait 0xfffffe006eabf580 syz-executor 975 0 0 0 DL (threaded) [KTLS] 100334 D - 0xfffffe0077d81200 [thr_0] 100336 D - 0xfffffe0077d81280 [thr_1] 100337 D - 0xffffffff83aa0aa8 [reclaim_0] 964 1 764 0 S uwait 0xfffffe005a2d5c00 syz-executor 963 1 764 0 S uwait 0xfffffe005a2d5700 syz-executor 948 1 767 0 S uwait 0xfffffe006e5e6100 syz-executor 944 1 765 0 S uwait 0xfffffe005a2d5b00 syz-executor 925 0 0 0 DL (threaded) [so_splice] 100269 D - 0xfffffe005a253a00 [thr_0] 100270 D - 0xfffffe005a253a40 [thr_1] 924 1 765 0 S uwait 0xfffffe006e5e7f00 syz-executor 920 1 764 0 S uwait 0xfffffe006e5e6200 syz-executor 908 1 764 0 S uwait 0xfffffe005a2d5800 syz-executor 907 1 764 0 S uwait 0xfffffe005a346100 syz-executor 903 1 764 0 S uwait 0xfffffe006e5e7c80 syz-executor 898 1 764 60928 S uwait 0xfffffe005a345e80 syz-executor 896 1 766 0 S uwait 0xfffffe006eac0200 syz-executor 886 1 766 0 S uwait 0xfffffe006eabfb80 syz-executor 885 1 765 0 S uwait 0xfffffe005a2d8700 syz-executor 876 1 764 0 S umtxn 0xfffffe005a2d5500 syz-executor 875 1 767 0 SV uwait 0xfffffe005a249080 syz-executor 865 1 764 0 S uwait 0xfffffe005a2d6000 syz-executor 864 0 0 0 DL mdwait 0xfffffe005a165000 [md1] 863 0 0 0 DL - 0xffffffff83a9f280 [soaiod4] 862 0 0 0 DL - 0xffffffff83a9f280 [soaiod3] 861 0 0 0 DL - 0xffffffff83a9f280 [soaiod2] 860 0 0 0 DL - 0xffffffff83a9f280 [soaiod1] 853 1 766 0 S uwait 0xfffffe006eabfe80 syz-executor 852 1 766 0 S uwait 0xfffffe005a249580 syz-executor 850 1 765 0 SV uwait 0xfffffe006eac0300 syz-executor 840 1 764 0 S uwait 0xfffffe005a346280 syz-executor 839 0 0 0 DL mdwait 0xfffffe005a167000 [md0] 828 812 828 0 Ss select 0xfffffe00587ff2c0 dhclient 821 1 764 0 S uwait 0xfffffe005a2d5900 syz-executor 812 1 424 65 S select 0xfffffe0058cec840 dhclient 811 0 0 0 DL aiordy 0xfffffe00549125a0 [aiod4] 810 0 0 0 DL aiordy 0xfffffe0054912b00 [aiod3] 809 0 0 0 DL aiordy 0xfffffe00548df5a0 [aiod2] 808 0 0 0 DL aiordy 0xfffffe00548dfb00 [aiod1] 767 763 767 0 S piperd 0xfffffe006e9fbcc0 syz-executor 766 763 766 0 S piperd 0xfffffe006e9fc5c0 syz-executor 765 763 765 0 S nanslp 0xffffffff8398f3c0 syz-executor 764 763 764 0 S nanslp 0xffffffff8398f3c0 syz-executor 763 761 761 0 S nanslp 0xffffffff8398f3c0 syz-executor 761 759 761 0 Ss pause 0xfffffe00548dd610 csh 759 1 759 0 Ss select 0xfffffe00587ff740 sshd 17 0 0 0 DL syncer 0xffffffff83aacc20 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0008026040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83aab1e0 [bufdaemon] 100083 D - 0xffffffff82e02140 [bufspacedaemon-0] 100094 D sdflush 0xfffffe0058a7ece8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83af60e0 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100078 D psleep 0xffffffff83adc078 [dom0] 100081 D launds 0xffffffff83adc084 [laundry: dom0] 100082 D umarcl 0xffffffff81d87d50 [uma] 7 0 0 0 DL - 0xffffffff8370cbd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff8462a600 [pf purge] 5 0 0 0 DL waiting 0xffffffff84463580 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff836d7340 [doneq0] 100047 D - 0xffffffff836d72c0 [async] 100076 D - 0xffffffff836d7140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ad78a0 [crypto] 100044 D crypto_ 0xfffffe0058613e30 [crypto returns 0] 100045 D crypto_ 0xfffffe0058613e80 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe0007f59c88 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83937da0 [g_event] 100038 D - 0xffffffff83937dc0 [g_up] 100039 D - 0xffffffff83937de0 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 Run CPU 0 [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0008007040 [init] 10 0 0 0 DL audit_w 0xffffffff83ad8340 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84a12ff0 [swapper] 100005 D - 0xfffffe0058016000 [softirq_0] 100006 D - 0xfffffe0058015e00 [softirq_1] 100007 D - 0xfffffe0058015d00 [if_io_tqg_0] 100008 D - 0xfffffe0058015c00 [if_io_tqg_1] 100009 D - 0xfffffe0058015b00 [if_config_tqg_0] 100010 D - 0xfffffe0007fc7500 [kqueue_ctx taskq] 100011 D - 0xfffffe0007fc7300 [jail_remove taskq] 100012 D - 0xfffffe0007fc7100 [bus taskq] 100015 D - 0xfffffe0007fc6a00 [thread taskq] 100017 D - 0xfffffe0007fc6600 [aiod_kick taskq] 100018 D - 0xfffffe0007fc6400 [deferred_unmount ta] 100019 D - 0xfffffe0007fc6200 [inm_free taskq] 100020 D - 0xfffffe0007fc6000 [in6m_free taskq] 100021 D - 0xfffffe0007fc5d00 [linuxkpi_irq_wq] 100022 D - 0xfffffe0007fc5b00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0007fc5b00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0007fc5b00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0007fc5b00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0007fc5600 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0007fc5600 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0007fc5600 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0007fc5600 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0008bffa00 [firmware taskq] 100041 D - 0xfffffe0008bff400 [crypto_0] 100042 D - 0xfffffe0008bff400 [crypto_1] 100057 D - 0xfffffe00587abb00 [vtnet0 rxq 0] 100058 D - 0xfffffe00587aba00 [vtnet0 txq 0] 100059 D - 0xfffffe00587ab900 [vtnet0 rxq 1] 100060 D - 0xfffffe00587ab800 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe00587ff880 [virtio_balloon] 100066 D - 0xffffffff827555a0 [deadlkres] 100070 D - 0xfffffe0058cd9100 [acpi_task_0] 100071 D - 0xfffffe0058cd9100 [acpi_task_1] 100072 D - 0xfffffe0058cd9100 [acpi_task_2] 100074 D - 0xfffffe0007fc8100 [mca taskq] 100075 D - 0xfffffe00587ac300 [CAM taskq] 100077 D - 0xfffffe0058cd8800 [ipsec_offload] 100148 D - 0xfffffe0007fc8c00 [netlink_socket (PID] 100211 D - 0xfffffe0058cd6e00 [netlink_socket (PID] 100213 D - 0xfffffe0058cd6900 [netlink_socket (PID] 100258 D - 0xfffffe0007fc8700 [netlink_socket (PID] 100513 D - 0xfffffe006eb47600 [netlink_socket (PID] 827 1 766 0 Z syz-executor db> show all locks Process 1200 (syz-executor) thread 0xfffffe005492f000 (100620) exclusive sleep mutex tcphash (tcphash) r = 0 (0xfffffe0007fe7a70) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:2717 exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe006e712560) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_usrreq.c:1316 Process 1198 (syz-executor) thread 0xfffffe0054975000 (100639) exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe0077fceaa0) locked @ /syzkaller/managers/main/kernel/sys/netinet/tcp_usrreq.c:1316 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 375 5023K 589 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4217 sysctloid 35418 2087K 35493 vtbuf 24 1968K 46 kobj 330 1320K 530 newblk 63 1040K 2582 vfscache 3 1025K 3 pcb 70 713K 403 filedesc 89 710K 755 inodedep 18 519K 736 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 219 434K 1337 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 9039 acpica 1674 184K 54408 vmem 5 144K 7 tidhash 3 141K 3 pagedep 12 131K 382 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 113 113K 130 sem 4 106K 4 gtaskqueue 18 98K 18 bus 994 81K 5040 md_sectors 19 76K 19 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 519 65K 521 ddb_capture 1 64K 1 kdtrace 278 52K 1859 umtx 400 50K 400 shm 5 40K 15 temp 36 38K 2033 DEVFS3 132 33K 142 hostcache 1 32K 1 msg 4 30K 4 kbdmux 6 28K 6 BPF 20 22K 44 DEVFS_RULE 56 20K 56 ifaddr 67 19K 69 LRO 18 19K 18 md_disk 23 17K 23 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 routetbl 130 16K 410 lltable 49 16K 57 ithread 90 15K 90 GEOM 89 15K 628 bus-sc 34 15K 1637 eventhandler 163 14K 163 tcp_fsb_rack 6 13K 26 ifnet 7 13K 7 ether_multi 152 13K 206 shmfd 10 12K 25 kenv 95 12K 95 ksem 7 11K 15 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 taskqueue 84 9K 96 in6_multi 65 9K 66 bmsafemap 2 9K 596 devstat 4 9K 4 UART 12 9K 12 cred 32 8K 289 pfs_vncache 1 8K 1 plimit 20 8K 625 audit_evclass 239 8K 301 sctp_atcl 19 8K 143 sglist 6 7K 6 kqueue 97 7K 1402 CAM DEV 3 6K 510 pwddesc 93 6K 1295 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 36 pf_ifnet 11 5K 20 UMA 271 5K 271 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 freework 16 4K 701 acpisem 28 4K 28 DEVFSP 55 4K 193 sctp_timw 13 4K 13 CC Mem 23 3K 249 terminal 11 3K 11 uidinfo 6 3K 25 acpidev 20 3K 20 proc-args 100 3K 2272 hhook 8 3K 10 clone 9 3K 9 kcovinfo 36 3K 36 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 lockf 18 2K 218 ip6ndp 12 2K 13 session 15 2K 53 Unitno 30 2K 58 sctp_ifa 13 2K 14 crypto 5 2K 74 CAM XPT 22 2K 543 in_multi 6 2K 17 tun 4 2K 4 toponodes 6 2K 6 ipsecpolicy 2 2K 2 inpcbpolicy 40 2K 606 msi 9 2K 9 netlink 2 2K 92 softdep 1 1K 1 dirrem 4 1K 565 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 32 NFSD session 1 1K 1 newdirblk 7 1K 357 CAM periph 4 1K 271 ipsec 3 1K 3 sctp_ifn 6 1K 14 tcp_pcm_rack 3 1K 13 mkdir 6 1K 714 freeblks 3 1K 412 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 selfd 12 1K 24270 osd 29 1K 264 isadev 6 1K 6 mount 16 1K 460 pci_link 10 1K 10 diradd 5 1K 582 freefile 5 1K 479 encap_export_host 12 1K 12 sctp_atky 19 1K 159 cryptodev 9 1K 167 indirdep 2 1K 333 select 4 1K 48 cdev 2 1K 2 lkpikmalloc 8 1K 9 freefrag 3 1K 137 chacha20random 1 1K 1 biobuf 1 1K 1 sctp_athm 19 1K 145 ip6opt 1 1K 69 ip6_msource 4 1K 6 vnodes 1 1K 7 ktls 1 1K 8 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 frag6 2 1K 2 tcpfunc 3 1K 3 ip_msource 3 1K 13 iov 3 1K 14930 loginclass 3 1K 5 prison 6 1K 6 filedesc_to_leader 3 1K 6 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 VN POLL 1 1K 4 aio 4 1K 12 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 sigio 1 1K 3 entropy 2 1K 33 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 filecaps 1 1K 72 mqdata 0 0K 0 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 24 sctp_iter 0 0K 12 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 12 sctp_aadr 0 0K 0 sctp_stro 0 0K 16 sctp_stri 0 0K 8 sctp_map 0 0K 32 filemon 0 0K 70 tcp_do_rack 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 520 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 14 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 1 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6_moptions 0 0K 5 in6_mfilter 0 0K 9 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_moptions 0 0K 15 in_mfilter 0 0K 41 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 21 fadvise 0 0K 1 statfs 0 0K 187 namei_tracker 0 0K 15 export_host 0 0K 0 cl_savebuf 0 0K 51 lio 0 0K 7 acl 0 0K 0 soname 0 0K 3664 mbuf_tag 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 procdesc 0 0K 8 ioctlops 0 0K 143 eventfd 0 0K 9 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 368 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 685 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 4 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 96 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 4 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 177 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 69 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 824 14135 0 254 37453824 0 mbuf 256 8793 869 55283 0 254 2473472 0 BUF TRIE 152 312 11492 1903 0 62 1794208 0 malloc-4096 4096 427 5 1730 0 2 1769472 0 malloc-128 128 12626 115 13305 0 126 1630848 0 malloc-384 384 4149 51 4169 0 30 1612800 0 RADIX NODE 152 8049 396 39446 0 62 1283640 0 malloc-65536 65536 14 5 85 0 1 1245184 0 UMA Slabs 0 112 10900 2 10900 0 126 1221024 0 ertt_txseginfo 40 29262 230 34057 0 254 1179680 0 sctp_asoc 2256 0 510 16 0 254 1150560 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 vmem btag 56 17799 96 17799 0 254 1002120 0 malloc-16384 16384 44 2 375 0 1 753664 0 FFS inode 1168 566 29 1050 0 8 694960 0 malloc-8192 8192 12 66 88 0 1 638976 0 sctp_ep 1152 19 492 119 0 254 588672 0 socket 1024 73 435 2001 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 194 0 0 2 509056 0 sctp_raddr 736 0 517 31 0 254 380512 0 VM OBJECT 264 1339 101 17815 0 30 380160 0 THREAD 1824 180 20 655 0 8 364800 0 malloc-64 64 3994 1361 28498 0 254 342720 0 256 Bucket 2048 143 9 1200 0 8 311296 0 VNODE 440 604 89 1091 0 30 304920 0 malloc-2048 2048 11 133 558 0 8 294912 0 malloc-2048 2048 126 18 1025 0 8 294912 0 tcp_bbr_map 128 302 1992 2493 0 126 293632 0 malloc-65536 65536 2 2 5 0 1 262144 0 malloc-16 16 14624 126 14957 0 254 236000 0 MAP ENTRY 96 2060 334 58789 0 126 229824 0 malloc-32768 32768 2 5 265 0 1 229376 0 DEVCTL 1024 29 191 156 0 0 225280 0 tcp_log 416 0 513 66 0 254 213408 0 malloc-32768 32768 4 2 124 0 1 196608 0 malloc-32 32 5434 488 5916 0 254 189504 0 UMA Zones 768 243 1 243 0 16 187392 0 FPU_save_area 832 182 34 968 0 16 179712 0 malloc-128 128 1213 182 25504 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 PROC 1376 96 25 1202 0 8 166496 0 unpcb 320 6 510 1227 0 254 165120 0 FFS2 dinode 256 566 64 1048 0 62 161280 0 malloc-256 256 103 527 3785 0 62 161280 0 malloc-4096 4096 34 4 527 0 2 155648 0 malloc-1024 1024 126 18 356 0 16 147456 0 S VFS Cache 104 1016 388 1601 0 126 146016 0 malloc-65536 65536 0 2 110 0 1 131072 0 malloc-65536 65536 1 1 9 0 1 131072 0 mbuf_packet 256 11 497 468 0 254 130048 0 ksiginfo 112 95 949 353 0 126 116928 0 filedesc0 1072 95 10 1295 0 8 112560 0 malloc-128 128 454 321 5549 0 126 99200 0 malloc-32768 32768 0 3 19 0 1 98304 0 malloc-16384 16384 6 0 7 0 1 98304 0 malloc-256 256 215 160 2350 0 62 96000 0 UMA Kegs 384 228 5 228 0 30 89472 0 128 Bucket 1024 71 12 312 0 16 84992 0 malloc-64 64 1004 319 3919 0 254 84672 0 malloc-256 256 210 105 749 0 62 80640 0 sctp_readq 152 0 520 2 0 254 79040 0 g_bio 408 0 180 11815 0 30 73440 0 64 Bucket 512 92 44 2409 0 30 69632 0 malloc-384 384 147 33 155 0 30 69120 0 malloc-64 64 578 493 4510 0 254 68544 0 md2 8 8192 192 8192 0 254 67072 0 malloc-8192 8192 6 2 87 0 1 65536 0 malloc-4096 4096 12 4 210 0 2 65536 0 malloc-256 256 182 73 566 0 62 65280 0 32 Bucket 256 83 172 760 0 62 65280 0 tcp_inpcb 1304 23 25 248 0 8 62592 0 malloc-256 256 29 166 1143 0 62 49920 0 DIRHASH 1024 35 13 43 0 16 49152 0 NAMEI 1024 0 48 16007 0 16 49152 0 malloc-16384 16384 1 2 181 0 1 49152 0 malloc-4096 4096 6 6 12 0 2 49152 0 malloc-2048 2048 11 13 129 0 8 49152 0 malloc-1024 1024 17 31 1067 0 16 49152 0 malloc-1024 1024 6 42 514 0 16 49152 0 VMSPACE 584 65 19 1168 0 16 49056 0 malloc-384 384 36 84 880 0 30 46080 0 ripcb 376 4 116 139 0 30 45120 0 syncache 168 0 264 3 0 254 44352 0 Files 80 214 336 9122 0 126 44000 0 TURNSTILE 136 201 114 201 0 62 42840 0 malloc-4096 4096 5 5 10 0 2 40960 0 pcpu-8 8 4799 321 5067 0 254 40960 0 pipe 736 23 32 331 0 16 40480 0 ttyinq 160 135 115 840 0 62 40000 0 sctp_chunk 152 0 260 18 0 254 39520 0 da_ccb 544 0 70 3090 0 16 38080 0 udp_inpcb 408 12 78 207 0 30 36720 0 hostcache 64 2 565 2 0 254 36288 0 malloc-64 64 53 514 14566 0 254 36288 0 malloc-64 64 41 526 154 0 254 36288 0 malloc-64 64 4 563 6 0 254 36288 0 malloc-64 64 99 468 1819 0 254 36288 0 16 Bucket 144 65 187 471 0 62 36288 0 tcp_rack_map 128 8 271 24 0 126 35712 0 malloc-128 128 28 251 159 0 126 35712 0 malloc-128 128 24 255 161 0 126 35712 0 malloc-128 128 6 273 714 0 126 35712 0 malloc-128 128 111 168 859 0 126 35712 0 malloc-128 128 13 266 287 0 126 35712 0 routing nhops 256 27 108 34 0 62 34560 0 ttyoutq 256 72 63 448 0 62 34560 0 malloc-384 384 59 31 456 0 30 34560 0 malloc-256 256 63 72 653 0 62 34560 0 malloc-256 256 35 100 50 0 62 34560 0 malloc-256 256 12 123 545 0 62 34560 0 SLEEPQUEUE 88 201 183 201 0 126 33792 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-8192 8192 2 2 61 0 1 32768 0 malloc-4096 4096 4 4 144 0 2 32768 0 malloc-2048 2048 1 15 26 0 8 32768 0 malloc-2048 2048 9 7 9 0 8 32768 0 malloc-2048 2048 2 14 5 0 8 32768 0 malloc-2048 2048 6 10 26 0 8 32768 0 malloc-1024 1024 3 29 78 0 16 32768 0 malloc-1024 1024 21 11 60 0 16 32768 0 malloc-512 512 1 63 132 0 30 32768 0 malloc-512 512 6 58 92 0 30 32768 0 malloc-512 512 5 59 121 0 30 32768 0 malloc-512 512 8 56 12 0 30 32768 0 malloc-512 512 8 56 25 0 30 32768 0 pcpu-64 64 495 17 495 0 254 32768 0 tcp_bbr_pcb 896 2 34 17 0 16 32256 0 sctp_stream_msg_out 112 0 288 1 0 254 32256 0 PGRP 120 19 245 58 0 126 31680 0 clpbuf 2624 0 12 277 0 4 31488 0 sctp_laddr 48 0 588 39 0 254 28224 0 rl_entry 48 2 586 5 0 254 28224 0 malloc-32 32 347 535 1410 0 254 28224 0 4 Bucket 48 7 581 47 0 254 28224 0 AIO 208 0 133 43 0 62 27664 0 udplite_inpcb 408 1 62 12 0 30 25704 0 cpuset 200 8 120 10 0 62 25600 0 malloc-8192 8192 1 2 22 0 1 24576 0 malloc-4096 4096 4 2 45 0 2 24576 0 PWD 40 45 561 406 0 254 24240 0 tcp_rack_pcb 1152 3 18 13 0 8 24192 0 rtentry 168 30 114 34 0 62 24192 0 8 Bucket 80 64 236 530 0 126 24000 0 itimer 352 0 66 19 0 30 23232 0 malloc-384 384 20 40 29 0 30 23040 0 malloc-384 384 21 39 626 0 30 23040 0 domainset 40 1 566 5 0 254 22680 0 Mountpoints 2816 2 6 6 0 4 22528 0 ertt 72 23 257 248 0 126 20160 0 malloc-64 64 6 309 10 0 254 20160 0 malloc-32 32 35 595 239 0 254 20160 0 malloc-32 32 77 553 126 0 254 20160 0 malloc-32 32 270 360 2417 0 254 20160 0 malloc-32 32 45 585 6085 0 254 20160 0 malloc-32 32 14 616 21 0 254 20160 0 2 Bucket 32 96 534 575 0 254 20160 0 KNOTE 160 0 125 78 0 62 20000 0 cryptop 280 0 70 6 0 30 19600 0 AIOCB 552 0 35 46 0 16 19320 0 ktls_session 256 0 75 1 0 62 19200 0 L VFS Cache 320 0 60 31 0 30 19200 0 AIOLIO 272 0 70 7 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 0 4 17 0 2 16384 0 malloc-2048 2048 1 7 1 0 8 16384 0 malloc-1024 1024 4 12 4 0 16 16384 0 malloc-1024 1024 8 8 8 0 16 16384 0 malloc-512 512 0 32 4 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 vtnet_tx_hdr 24 1 667 34786 0 254 16032 0 malloc-16 16 562 438 5480 0 254 16000 0 tcp_log_id_node 120 1 131 1 0 126 15840 0 kenv 258 17 43 1066 0 30 15480 0 mqnode 416 3 33 3 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 tcp_log_id_bucket 176 1 68 1 0 62 12144 0 malloc-16 16 38 712 341 0 254 12000 0 malloc-16 16 64 686 28012 0 254 12000 0 malloc-16 16 13 737 13 0 254 12000 0 malloc-16 16 36 714 66 0 254 12000 0 malloc-16 16 13 737 48 0 254 12000 0 malloc-384 384 11 19 11 0 30 11520 0 malloc-384 384 1 29 1 0 30 11520 0 swrbuf 2624 0 4 11 0 4 10496 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-8192 8192 1 0 1 0 1 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 malloc-16 16 10 490 10 0 254 8000 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 20 0 0 3744 0 md7 4 0 0 0 0 254 0 0 splice 184 0 0 0 0 62 0 0 md0 2048 0 0 0 0 8 0 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf frags 256 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 376 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-1024 1024 0 0 0 0 16 0 0 malloc-512 512 0 0 0 0 30 0 0 malloc-512 512 0 0 0 0 30 0 0 malloc-32 32 0 0 0 0 254 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 104 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0