last executing test programs: 11.475356997s ago: executing program 2 (id=142): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x46) setsockopt$inet_mreq(r0, 0x0, 0x9, &(0x7f0000000080)={@empty, @multicast2}, 0x8) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x3, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getfhat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x200) setsockopt$inet_mreqsrc(r1, 0x0, 0x34, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0xc, &(0x7f0000000000)=ANY=[], 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x43, &(0x7f0000000b40)=0x8, 0x4) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) rfork(0x3060) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 8.867117265s ago: executing program 2 (id=142): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x46) setsockopt$inet_mreq(r0, 0x0, 0x9, &(0x7f0000000080)={@empty, @multicast2}, 0x8) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x3, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getfhat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x200) setsockopt$inet_mreqsrc(r1, 0x0, 0x34, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0xc, &(0x7f0000000000)=ANY=[], 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x43, &(0x7f0000000b40)=0x8, 0x4) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) rfork(0x3060) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 6.833149236s ago: executing program 1 (id=300): mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0) mprotect(&(0x7f0000cc0000/0x1000)=nil, 0x1000, 0x40000) minherit(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) r0 = socket(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r2, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) open(0x0, 0x70e, 0x0) dup2(r1, r2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2, 0x1, @rand_addr=0x7ffffffe}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10000, &(0x7f0000000340)=0xff, 0x4) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) sendto$inet(r3, &(0x7f0000000740)="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", 0x577, 0x20010, &(0x7f0000000000)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) shutdown(r0, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) listen(r4, 0x7fffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0xff67, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r5, &(0x7f0000000080)={0xff67, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) rfork(0x2000) socket$inet6_sctp(0x1c, 0x5, 0x84) r6 = kqueue() kevent(r6, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0xfffffffffffffffd, 0x0, 0x7, 0x3fffffffffffff]}], 0x1, 0x0, 0x0, 0x0) setreuid(0xee00, 0x0) sync() freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) 6.708023034s ago: executing program 2 (id=142): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x46) setsockopt$inet_mreq(r0, 0x0, 0x9, &(0x7f0000000080)={@empty, @multicast2}, 0x8) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x3, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getfhat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x200) setsockopt$inet_mreqsrc(r1, 0x0, 0x34, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0xc, &(0x7f0000000000)=ANY=[], 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x43, &(0x7f0000000b40)=0x8, 0x4) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) rfork(0x3060) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 5.188495602s ago: executing program 1 (id=302): socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) writev(r1, &(0x7f0000000280), 0x26) writev(r1, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3861) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0xffffdffc, @empty, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x1c, 0x1c, 0x2, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) select(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffff38d}, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x47, &(0x7f0000000200)={@rand_addr=0xca, @multicast2, @broadcast}, 0xc) setrlimit(0x7, &(0x7f0000000040)={0x1}) setreuid(0xee00, 0x0) vfork() r2 = kqueue() setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x200, 0x0, 0x0) kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x83, 0x8, 0xe8c5, 0x0, [0x1, 0x0, 0x7, 0x3fffffffffffff]}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000040)={0x1}) setrlimit(0x2, &(0x7f00000000c0)={0x1, 0x9}) setreuid(0xee00, 0x0) fork() setrlimit(0x7, &(0x7f0000000040)={0x1}) setreuid(0xee00, 0x0) socket(0x1, 0x2, 0x40) ksem_init(&(0x7f0000000040)=0x0, 0x9) ksem_destroy(r3) ksem_wait(r3) getpid() 4.991886152s ago: executing program 0 (id=304): open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) freebsd10_pipe(&(0x7f0000000540)) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000500)=[{0x3, 0xfffffffffffffffe, 0x103, 0x0, 0x4, 0x0, [0x0, 0x10000000040, 0x2, 0xdff]}], 0x1, 0x0, 0x0, 0x0) unlink(&(0x7f0000001080)='./file0\x00') cpuset_getid(0x1, 0x1, 0x3, &(0x7f00000001c0)) rtprio(0x1, 0x0, &(0x7f0000000580)={0x2, 0x4}) kqueue() setrlimit(0x7, &(0x7f0000000040)={0x2, 0xc}) setreuid(0xee00, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) getsockopt$inet6_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x104, 0x0, 0x0) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) writev(r2, &(0x7f0000000280), 0x26) write(r2, &(0x7f00000002c0)="9665a44fac67d37bf257ef136eb1a63f9a392409ea4b605f4663ebe12cfbdcbc31652e11fc86f0ee0dea82ecc4f3a484fc3b5dfa8d1b33d7e1f2ed4b872449c632b9f5502ba7eacdca306436a07e64a6825ae211af60ba3d4bc3671be0e460f48edcd9724583abd8735f99f1e1593e20030db872585b9fe634c43f62d756142525554a3d8256acd2d22756adb38b0316d823bd0ffc49a3c92c90b8b59ee18b0a317fac3b185ef1c7bc5d65bf02779684d19f32da9b97d72fa4b9e7ff85e65191cd6d9ec1f6c97471da14a4d41c543d05fa0e5ab70d902ccd64", 0xd9) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x48, &(0x7f0000000140)={@multicast1, @multicast2, @broadcast}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x46, &(0x7f0000000040)={@multicast1, @loopback, @local={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x48, &(0x7f0000000100)={@multicast1, @rand_addr=0x1, @remote={0xac, 0x14, 0x0}}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x48, &(0x7f0000000180)={@multicast1, @multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x48, &(0x7f0000000200)={@multicast1, @rand_addr=0xfffffffd, @multicast1}, 0xc) 4.545860005s ago: executing program 3 (id=307): socket$inet6_sctp(0x1c, 0x1, 0x84) socket(0x1c, 0x1, 0x0) symlink(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet6_sctp(0x1c, 0x5, 0x84) openat$crypto(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800462500200067000201679078ac1400bbe00000028504db740000907800680da7bedf3b2bd2bc9b106ba0b43dff342d87d2bb748f3f2833fbf4fc08bbd4de0aed16f19746296a49961c8ae8eafec4ccf869cbc0c8f7263072aa48a51e8f08abb031a2a5b7c51e4c80d19c4050a2eb7b355acd477c772207a7d5ab94103b83cc408a50b5e9d408830bef651255a45c0e2ebbaa33e161205d71e3c3441705e21b"]) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) r0 = kqueue() freebsd11_kevent(r0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffa, 0xc011}, {0x0, 0xfffffffffffffffa, 0xc700}], 0x2, &(0x7f00000001c0)=[{}], 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x16, &(0x7f0000000000)={0x3}) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x9) mlockall(0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f0000000440)={0x19, 0x0, 0x10, &(0x7f0000000200)="3c9e89526b1f00b07f8aee18e5aa3505", 0x0, 0x0, 0x0, 0xfdffffff}) mlockall(0x2) r4 = fcntl$dupfd(r3, 0x11, r2) renameat(r4, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00') ioctl$CIOCCRYPT(r4, 0xc0306367, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x8202, &(0x7f0000000480), 0x0, 0x0}) socket$inet6_sctp(0x1c, 0x1, 0x84) (async) socket(0x1c, 0x1, 0x0) (async) symlink(&(0x7f0000000100)='./file0\x00', 0x0) (async) socket$inet6_sctp(0x1c, 0x5, 0x84) (async) openat$crypto(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800462500200067000201679078ac1400bbe00000028504db740000907800680da7bedf3b2bd2bc9b106ba0b43dff342d87d2bb748f3f2833fbf4fc08bbd4de0aed16f19746296a49961c8ae8eafec4ccf869cbc0c8f7263072aa48a51e8f08abb031a2a5b7c51e4c80d19c4050a2eb7b355acd477c772207a7d5ab94103b83cc408a50b5e9d408830bef651255a45c0e2ebbaa33e161205d71e3c3441705e21b"]) (async) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) (async) kqueue() (async) freebsd11_kevent(r0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffa, 0xc011}, {0x0, 0xfffffffffffffffa, 0xc700}], 0x2, &(0x7f00000001c0)=[{}], 0x1, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x16, &(0x7f0000000000)={0x3}) (async) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x9) (async) mlockall(0x2) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$crypto(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') (async) ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f0000000440)={0x19, 0x0, 0x10, &(0x7f0000000200)="3c9e89526b1f00b07f8aee18e5aa3505", 0x0, 0x0, 0x0, 0xfdffffff}) (async) mlockall(0x2) (async) fcntl$dupfd(r3, 0x11, r2) (async) renameat(r4, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00') (async) ioctl$CIOCCRYPT(r4, 0xc0306367, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x8202, &(0x7f0000000480), 0x0, 0x0}) (async) 4.542562605s ago: executing program 2 (id=142): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x46) setsockopt$inet_mreq(r0, 0x0, 0x9, &(0x7f0000000080)={@empty, @multicast2}, 0x8) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x3, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getfhat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x200) setsockopt$inet_mreqsrc(r1, 0x0, 0x34, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0xc, &(0x7f0000000000)=ANY=[], 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x43, &(0x7f0000000b40)=0x8, 0x4) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) rfork(0x3060) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 2.820450804s ago: executing program 0 (id=308): r0 = socket(0x17, 0x1, 0xfe) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f00000000c0)=0x8001, 0x4) (async) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f00000000c0)=0x8001, 0x4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0x0, 0x564, 0xffffffffffffffff, 0x8000000000000000, 0x0, 0x1}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) 2.817530355s ago: executing program 1 (id=309): kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0xd, &(0x7f0000000080)={0x54007ff, {{0x1c, 0x1c, 0x2, 0x80, @ipv4={'\x00', '\xff\xff', @loopback}}}, {{0x1c, 0x1c, 0x3, 0x10002, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}}}, 0x108) fork() openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6_udplite(0x1c, 0x2, 0x88) r1 = socket(0x1c, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x26, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x80000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 2.816980314s ago: executing program 3 (id=310): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = __specialfd$inotify(0x2, 0x0, 0x0) inotify_add_watch_at(r0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000d53) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x22000616) open$dir(&(0x7f0000000080)='.\x00', 0x10000, 0x0) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) cpuset_getid(0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_int(r1, 0x29, 0x16, 0x0, &(0x7f0000004280)) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) setgroups(0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) r2 = getegid() setresgid(r2, 0x0, r2) lchown(&(0x7f0000000000)='./file1\x00', 0x0, r2) mount(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2.753120572s ago: executing program 3 (id=311): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x8, 0x0) (async) openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x8, 0x0) kqueue() (async) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x100, &(0x7f0000000100)) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) freebsd11_getdents(r1, &(0x7f0000000180)=""/53, 0x20) (async) freebsd11_getdents(r1, &(0x7f0000000180)=""/53, 0x20) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000002700)="6a3364f80c04449d", 0x2400, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) kmq_notify(0xffffffffffffffff, 0x0) kqueue() (async) r3 = kqueue() freebsd11_kevent(r3, &(0x7f0000001a40), 0x0, &(0x7f0000001ac0)=[{}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) (async) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) sendfile(0xffffffffffffffff, r4, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x7) (async) sendfile(0xffffffffffffffff, r4, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x7) setgroups(0x2, &(0x7f0000000f80)=[0x0, 0x0]) r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(0x0, 0x100000) (async) pipe2(0x0, 0x100000) ioctl$MDIOCATTACH(r7, 0xc1c06d00, &(0x7f0000000780)={0x0, 0x2, 0x3, 0x0, 0x10001, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, [0x2, 0xfffffffe, 0x0, 0x4, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x7, 0xf22, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x0, 0x46d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x14, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x9]}) (async) ioctl$MDIOCATTACH(r7, 0xc1c06d00, &(0x7f0000000780)={0x0, 0x2, 0x3, 0x0, 0x10001, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, [0x2, 0xfffffffe, 0x0, 0x4, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x7, 0xf22, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x0, 0x46d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x14, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x9]}) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r8, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) (async) aio_write(&(0x7f0000000340)={r8, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r9 = socket(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) setsockopt$inet_tcp_int(r9, 0x6, 0x80, &(0x7f0000000000)=0xfff, 0x4) 2.523391537s ago: executing program 3 (id=312): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) open(0x0, 0x70e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x2) aio_write(&(0x7f0000000340)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) rfork(0x96014) sync() 2.512729242s ago: executing program 0 (id=313): sigaction(0xe, &(0x7f0000000200)={&(0x7f0000000180)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x75, {[0xfffff801, 0x50e5, 0xfdffffff]}}, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040), 0x0, 0x0, 0x24, 0x0) close(r0) execve(0x0, 0x0, 0x0) socket(0x2, 0x1, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) ktimer_create(0x4, 0x0, &(0x7f0000000280)=0x0) ktimer_settime(r2, 0x0, &(0x7f0000000340)={{0x1066}, {0x0, 0x404287}}, 0x0) rfork(0x1000) 2.375533385s ago: executing program 1 (id=314): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="c7a2e46f05fa", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xff, 0x60, 0x0, @multicast1=0xac1401ff, @multicast1}, @icmp=@echo}}}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) ioctl$DIOCSETSTATUSIF(r0, 0xc0104414, &(0x7f0000000040)) 2.273338819s ago: executing program 3 (id=315): mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6(0x1c, 0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000002c0)=0x4004b, 0x4) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffffe, 0x8001, 0x400, 0x0, 0x1}, {0x0, 0xffffffffffffffff, 0x91, 0x2, 0x0, 0x10}], 0x2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./file1\x00', 0x0) chroot(&(0x7f00000023c0)='./file0\x00') r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file1\x00') renameat(r3, &(0x7f0000000200)='./file1\x00', r3, &(0x7f0000000140)='./file0/file0\x00') r4 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) cpuset_getaffinity(0x2, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)) unmount(&(0x7f00000000c0)='./file0\x00', 0x180244) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, &(0x7f0000000040)=ANY=[], 0xf8) r6 = openat(r4, &(0x7f0000000240)='./file0/file0\x00', 0x200201, 0x10) aio_write(&(0x7f0000000340)={r6, 0x80000001, &(0x7f0000000400)="005018b4ba266379159360eeea4941711b309b0dc075e15086c95088a01f9d66d2dfc6f357c3cae4878c3e7e751fb8bd115ed9c904cf90e069b26041c55103f780377d", 0x43, [0x0, 0x400], 0x4000000003, 0x8, 0x0, {0x0, 0x3, 0x0}, {0x0, 0x2, @sival_int, @ke_flags=0x80a9}}) sigaction(0x6, 0x0, 0x0) socket$inet6(0x1c, 0x3, 0x4) r7 = socket(0x1c, 0x1, 0x0) aio_read(&(0x7f0000000180)={r7, 0xca1, 0x0, 0x0, [0xc7, 0x18], 0x7, 0x5, 0x4, {0xf, 0x6, 0x0}, {0x1, 0x8, @sigval_int=0x3, @ke_flags=0x804c}}) r8 = socket(0x11, 0x3, 0x0) sendto$unix(r8, &(0x7f0000000100)="234812a601000000", 0x8, 0x8, 0x0, 0x0) 2.272772264s ago: executing program 1 (id=316): r0 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r1 = open$dir(&(0x7f0000000340)='./file1/file0\x00', 0x0, 0xb) utimensat(r1, 0x0, 0x0, 0x6200) ktrace(0x0, 0x2, 0xc, 0x0) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x1c, &(0x7f0000000000)="7ace3e4602000145d93c23eb4259a49f", 0x10) open(&(0x7f0000000200)='./file0/file0/..\x00', 0x78e, 0x8) chroot(&(0x7f0000000080)='./file0/file0/..\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) shm_open2(&(0x7f0000001240)='./file0\x00', 0x200, 0x3, 0x4, &(0x7f0000001280)='+$\x00') unmount(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x48000101) fork() r3 = socket$unix(0x1, 0x1, 0x0) freebsd11_fstatfs(r3, &(0x7f0000001040)) open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x10) open$dir(&(0x7f0000000240)='./file0\x00', 0x40, 0xca0706ee3fd5d672) r4 = kqueue() kevent(r4, &(0x7f0000000380)=[{0x4, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, [0x0, 0x1, 0x0, 0x3]}, {0x4, 0xfffffffffffffffe, 0xc700, 0x1, 0x3, 0x2, [0x4c, 0x0, 0x7fff]}], 0x2, 0x0, 0x20, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) 2.15734269s ago: executing program 2 (id=142): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x46) setsockopt$inet_mreq(r0, 0x0, 0x9, &(0x7f0000000080)={@empty, @multicast2}, 0x8) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x3, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getfhat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x200) setsockopt$inet_mreqsrc(r1, 0x0, 0x34, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0xc, &(0x7f0000000000)=ANY=[], 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x43, &(0x7f0000000b40)=0x8, 0x4) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) rfork(0x3060) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 448.936758ms ago: executing program 0 (id=317): socket$inet6(0x1c, 0x1, 0x0) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udplite(r1, 0x88, 0x4, &(0x7f0000000000)=0x4, 0x58) (async) syz_emit_ethernet(0x94, &(0x7f0000001200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x5e, 0x3a, 0xff, @rand_addr="78042000000014000001000000086500", @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote={0xfe, 0x80, '\x00', 0x0}, [{0x3, 0x8, "84c814c23d9b66e0080fbd81b768b77a8b9b3780d22952c0db0042da2e39ebf0581cbc744d58fb8fbb6518711503ef1b3a7dd76eac249ac9e93a99f08544"}, {0x3, 0x0, "650595ab"}]}}}}}}) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x82121b000, 0x3) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x88) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x6) (async) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x1, @rand_addr="ff356b6b700f76a2ac1ff23b4d26661b", 0xffffc}}, {{0xfffffffffffffeb0, 0x1c, 0x1, 0x0, @empty, 0x2}}}, 0x108) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) (async) mount(&(0x7f0000000080)='cd9660\x00', 0x0, 0x10200140, &(0x7f0000000100)) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x4) (async) clock_getres(0xe, &(0x7f0000001440)) (async) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, &(0x7f0000000080)={0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x400]}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$DIOCBEGINADDRS(r6, 0xc4704433, &(0x7f0000000040)) (async) ioctl$DIOCADDADDR(0xffffffffffffffff, 0xc4704434, &(0x7f0000000480)="02") (async) ioctl$DIOCADDADDR(r5, 0xc4704434, &(0x7f0000000040)) (async) ioctl$DIOCADDADDR(r4, 0xc4704434, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fee000/0x12000)=nil, 0x3000) (async) cpuset_setaffinity(0x3, 0x9, 0x0, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) 446.051576ms ago: executing program 1 (id=318): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) flock(r1, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000240)={@in6={{0x1c, 0x1c, 0x2, 0xff, @local={0xfe, 0x80, '\x00', 0x0}, 0x1ea2}}, 0x0, 0x1, 0x9, 0x7, 0x1, 0x3}, &(0x7f00000000c0)=0x98) setsockopt$inet6_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000140)={r2, 0xa4e}, 0x8) open(&(0x7f0000000380)='./file0\x00', 0x205, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x8) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX, @ANYBLOB="16c5ce57e2e4defca88231839a8348bfd9022f24b0823dd3a61b2bf9eaee9789e133a9658c0453dec020141207856e527fb903f90932dfde9d4f773f7250ad63ba52af395c5a236399940561e42fd32710e430729442f207cad17d2fa40cd1c95ab5aa7b3e191498914d7befba04a0809776a3c4bdee5e8b1cf83fdb0b6148c5ef9da9b6c52671114615abb056b2f11ee8d35a45a4adf84eb5a737ee7a3472ea85ffe95966d27b5b41e47f653fa39d55ce00cc039707c32d3590d93e9386", @ANYRESOCT=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r3 = open$dir(&(0x7f0000000100)='.\x00', 0x8, 0x91) symlinkat(&(0x7f0000000dc0)='./file0\x00', r3, 0x0) mkdir(&(0x7f00000001c0)='./file\x00', 0x28) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) openat$smbus(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_emit_ethernet(0x6e, &(0x7f00000006c0)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d90020", 0x38, 0x3a, 0x0, @rand_addr="3bcc694212000300000025bf80a0e900", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3800, {0x0, 0x6, "06c33e", 0x0, 0x2c, 0x0, @loopback={0x1000000}, @loopback, [], "94ef0f13c9356461"}}}}}}}) shm_open2(&(0x7f0000000000)='./file0\x00', 0x200, 0x142, 0x5, 0x0) 445.070414ms ago: executing program 3 (id=319): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x1c0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000180), 0x2000000, 0x0) ioctl$MDIOCQUERY(r1, 0xc1c06d02, &(0x7f0000000700)={0x0, 0x1, 0x1, 0x0, 0x95, 0x8, 0x80000000, 0x8, 0x2, 0xf5ce, &(0x7f00000001c0)='\x00', [0x9, 0x5, 0xffff, 0x4, 0x1, 0x8, 0x5, 0x1, 0x2, 0x400, 0x2, 0x8016, 0x9, 0x1, 0xff, 0x7, 0x17, 0x7, 0xfffffffe, 0x4, 0x3, 0xfff, 0x6, 0x4, 0x2, 0x103, 0x607, 0x7ff, 0x5, 0x0, 0x6, 0x1, 0xc8, 0x3ff, 0x1ff, 0x73, 0xa96, 0x4, 0xe9, 0xfffffff8, 0x28, 0x45, 0x2, 0x9, 0x5, 0x6a, 0x4, 0x2, 0x8, 0x10001, 0x200, 0x5, 0x81, 0x6, 0x4, 0x6, 0xffffffff, 0xfff, 0x1, 0x1, 0x80, 0xfffffffd, 0xffff, 0x80000000, 0x7f, 0x3, 0xffffffff, 0xff, 0x4, 0x8, 0x6, 0x8000, 0x8, 0x9, 0x9, 0x4, 0x3ff, 0x4, 0x7, 0x0, 0x8, 0x8, 0x1, 0x1, 0x7, 0x9, 0x7, 0xb7, 0x20, 0x0, 0x3, 0x7f, 0xd7, 0x7, 0x8, 0x68]}) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x1, @rand_addr="ff356b6b700f76a2ac1ff23b4d26661b", 0x100000}}, {{0x1c, 0x1c, 0x1, 0x0, @empty, 0x2}}}, 0x108) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x0, @rand_addr="ff356b6b700f76a2ac1ff23b4d26661b", 0x100000}}, {{0x1c, 0x1c, 0x1, 0x0, @rand_addr="000000000000000b0500009300", 0x2}}}, 0x108) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0x40, &(0x7f0000000200)='hd\x00', 0x3) setsockopt$inet6_group_source_req(r3, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0x4, @rand_addr="ff356b6b700f76a2ac1ff23b4d26661b", 0xffffd}}, {{0x1c, 0x1c, 0x1, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, 0x2}}}, 0x108) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) sync() shmget(0x2, 0x2000, 0x182, &(0x7f000020d000/0x2000)=nil) kevent(0xffffffffffffffff, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0) r4 = fork() mlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) sigqueue(r4, 0xf, @sival_int=0x8000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) setsockopt(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)='`', 0x1) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$inet6_sctp(0x1c, 0x1, 0x84) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) write(r6, &(0x7f0000000140)='\x00', 0xfe80) poll(&(0x7f0000000680)=[{r6, 0x15}], 0x1, 0x10000008) close(r5) ioctl$MDIOCQUERY(r5, 0xc1c06d02, &(0x7f0000000300)={0x2, 0x1a1, 0x1, 0x0, 0x80, 0x4, 0x7, 0x9, 0x400, 0x6, &(0x7f0000000080)='\x00\xeeK\x95\x97\x80', [0x41, 0x3, 0x7e9, 0xa4, 0x0, 0x4, 0x4, 0x8, 0x5, 0x453bd741, 0x7, 0x829d, 0x0, 0x4, 0x6, 0x1000, 0x10000, 0x2, 0xfffffff7, 0x8, 0x6, 0x7, 0x10000008, 0x3000000, 0x4, 0x1, 0x4, 0xff, 0x1, 0xffffff1f, 0x80, 0x1, 0x326, 0xabf, 0xa74f, 0x2, 0x3, 0x64c6, 0x3, 0x6, 0x6ef6b56, 0x6, 0x0, 0x8, 0xfffffffa, 0xffffffff, 0x8, 0x10000, 0x8003, 0x2, 0x7, 0x6, 0xffffffc0, 0x3, 0x3, 0xd6, 0x7fff, 0x3, 0x0, 0xfffffff8, 0xd, 0xa5, 0x9e, 0x40, 0x3, 0x6, 0x1, 0x401, 0x0, 0x8, 0x7, 0x6, 0x9, 0x922b, 0xfffe, 0x20ad, 0x7, 0x6, 0x7b12, 0x2, 0x0, 0x802, 0x2, 0x2, 0x7, 0xe000000, 0xa, 0x6, 0xfffffffe, 0x1, 0xffffffff, 0x3, 0x8, 0x0, 0x80000000, 0x8]}) __realpathat(r5, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003040)) 293.195912ms ago: executing program 0 (id=320): open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r0 = socket(0x1c, 0x1, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r1, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r1, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r2, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00') unlink(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r4, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r4, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r4, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) mkdirat(r4, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x5c, 0x10, 0xfe}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open$dir(&(0x7f00000012c0)='./file0/file0\x00', 0x1, 0x1a4) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x20000) (async) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x20000) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r5, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f0000000dc0)='./file0\x00', r5, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000700)='./file0\x00', r5, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') listen(r0, 0x7f) 93.187326ms ago: executing program 0 (id=321): aio_waitcomplete(0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800452000280000000005069078000001ffac1400aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200a790780000c97f7664a0b74a20874c94ec6a84ee3ccd28301533f04b4b49f8c642c88716640ea7901e8a9d96e89bde1ca8d42820d89b2f2ff7cbdf0ec8bb7c9116afba5db4dfbaabbd42987c3fff3d892d2457697aa967676b436e0fbbe7b26dcea8879859932e590a0f7b83120f963417fcd0aa3a880c6fd2d3699d6092c051b6be59ede6894bc440ca1c432499db0a504eb73bea5c1e1071bf3f50a8b064b8027df718b4385ca787de8951d075db88e82084b287c37c21f1a1ebadb5751ff47c00d33a23e638aa75a4ece6223619e71b49a553ae00"/228]) extattr_set_file(&(0x7f0000000080)='./file0\x00', 0x1, 0x0, 0x0, 0x0) setegid(0x0) r0 = kqueue() kevent(r0, &(0x7f0000000000)=[{0xfffffffe, 0xfffffffffffffff9, 0x4009, 0x1, 0xe8c5, 0x40000000, [0x0, 0x88f]}], 0x1, 0x0, 0x0, 0x0) socket(0x1c, 0x1, 0x0) socket$bt_l2cap(0x24, 0x3, 0x87) r1 = socket(0x26, 0x2, 0x0) bind(r1, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffbfa724cf2ca908060001080006040001aaaaaaaaaabbac1400bbffffffffffffac1400aa848667a49eb5f181638c01fbfbf78767eba52573b45626cd891ba9808f1124770843313e6b3910b7097b8a7d"]) recvfrom$inet(r1, 0x0, 0x0, 0x81, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) r2 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$inet6_buf(r2, 0x29, 0x23, 0x0, &(0x7f00000007c0)) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) open$dir(&(0x7f0000000200)='./file0\x00', 0x4, 0x180) r4 = kqueue() kevent(r4, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$KDGETMODE(r4, 0x40046676, 0x5) r5 = socket(0x1c, 0x1, 0x0) r6 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x2a, 0x0) ioctl$KDGETMODE(r6, 0x40046676, 0x22e00000) getfhat(r1, 0x0, 0x0, 0x0) ioctl$KDGETMODE(r5, 0x40046676, 0x22e00000) mkdir(&(0x7f0000000140)='./file0\x00', 0x190) 0s ago: executing program 2 (id=142): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, 0x2, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x46) setsockopt$inet_mreq(r0, 0x0, 0x9, &(0x7f0000000080)={@empty, @multicast2}, 0x8) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x3, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getfhat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x200) setsockopt$inet_mreqsrc(r1, 0x0, 0x34, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0xc, &(0x7f0000000000)=ANY=[], 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x43, &(0x7f0000000b40)=0x8, 0x4) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) rfork(0x3060) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. WARNING pid 844 (syz-executor): ioctl sign-extension ioctl 2000004218456b if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058557800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1000 Warning! syz-executor[1043] uses SF_SYNC sendfile(2) flag. Please follow up to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287348. To be removed in FreeBSD 16 vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe0077cc26e0: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83713080 usecount 167, writecount 133, refcount 70 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00541365d0 ref 1 pages 544 cleanbuf 62 dirtybuf 6 lock type ufs: EXCL by thread 0xfffffe0054149000 (pid 1081, syz-executor, tid 100478) nlink=1, effnlink=1, size=2147483654, extsize 0 generation=8e2b1120, uid=0, gid=0, flags=0x60091 ino 139, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0058557800 Out of ktrace request objects. lock order reversal: 1st 0xfffffe0054115060 vm map (user) (vm map (user), sx) @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:2813 2nd 0xfffffe0077cc1070 ufs (ufs, lockmgr) @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3618 lock order ufs -> vm map (user) established at: #0 0xffffffff81653871 at witness_checkorder+0x781 #1 0xffffffff81542c69 at _sx_xlock+0x139 #2 0xffffffff81e059e9 at vm_map_fixed+0xf9 #3 0xffffffff8140a28f at elf64_map_insert+0x2bf #4 0xffffffff814095c6 at elf64_load_sections+0x336 #5 0xffffffff81407549 at exec_elf64_imgact+0x1579 #6 0xffffffff81472604 at kern_execve+0x1644 #7 0xffffffff8141ae28 at start_init+0x358 #8 0xffffffff814856bc at fork_exit+0xcc #9 0xffffffff820da85e at fork_trampoline+0xe lock order vm map (user) -> ufs attempted at: #0 0xffffffff81654742 at witness_checkorder+0x1652 #1 0xffffffff814bb630 at lockmgr_lock_flags+0x340 #2 0xffffffff81d944ab at ffs_lock+0x18b #3 0xffffffff822fa487 at VOP_LOCK1_APV+0x57 #4 0xffffffff817c498e at _vn_lock+0x14e #5 0xffffffff817865fd at vput_final+0x69d #6 0xffffffff81e218b1 at vm_object_deallocate+0xa11 #7 0xffffffff81df7f41 at vm_fault_copy_entry+0x9d1 #8 0xffffffff81e0abdd at vm_map_protect+0xfed #9 0xffffffff81e1c721 at sys_mprotect+0x191 #10 0xffffffff82135702 at amd64_syscall+0x4e2 #11 0xffffffff820da12b at fast_syscall_common+0xf8 pid 913 (syz-executor), tap2: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe006df0a180 is deleted tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP FreeBSD/amd64 (ci-freebsd-main-1.us-central1-b.c.syzkaller.internal) (ttyu0) login: ktrace write failed, errno 27, tracing stopped for pid 1159 ktrace write failed, errno 27, tracing stopped for pid 1165 ktrace write failed, errno 27, tracing stopped for pid 1157 ktrace write failed, errno 27, tracing stopped for pid 768 ktrace write failed, errno 27, tracing stopped for pid 1091 ktrace write failed, errno 27, tracing stopped for pid 1156 if_delmulti_locked: detaching ifnet instance 0xfffffe0058557800 ktrace write failed, errno 27, tracing stopped for pid 1150 ifaddr cache = 0xfffffe0077b74780 is deleted ktrace write failed, errno 27, tracing stopped for pid 766 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 ktrace write failed, errno 27, tracing stopped for pid 1151 tap2: link state changed to DOWN ktrace write failed, errno 27, tracing stopped for pid 1152 ktrace write failed, errno 27, tracing stopped for pid 1154 ktrace write failed, errno 27, tracing stopped for pid 1164 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP ktrace write failed, errno 27, tracing stopped for pid 770 if_delmulti_locked: detaching ifnet instance 0xfffffe0058557800 ifaddr cache = 0xfffffe0077b74480 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 ktrace write failed, errno 27, tracing stopped for pid 1111 ktrace write failed, errno 27, tracing stopped for pid 767 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP arp: packet with unknown hardware format 0x15 received on tap0 ifaddr cache = 0xfffffe0077b74d80 is deleted tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 lock order reversal: 1st 0xfffffe0077cc1ac0 ufs (ufs, lockmgr) @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3380 2nd 0xffffffff830019c0 proctree (proctree, sx) @ /syzkaller/managers/main/kernel/sys/kern/subr_prf.c:185 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP lock order proctree -> ufs established at: #0 0xffffffff81653871 at witness_checkorder+0x781 #1 0xffffffff814bb4c6 at lockmgr_lock_flags+0x1d6 #2 0xffffffff81d944ab at ffs_lock+0x18b #3 0xffffffff822fa487 at VOP_LOCK1_APV+0x57 #4 0xffffffff817c498e at _vn_lock+0x14e #5 0xffffffff817c5238 at vn_close1+0x1e8 #6 0xffffffff814acdba at ktrops+0x41a #7 0xffffffff814abf6d at sys_ktrace+0x52d #8 0xffffffff82135702 at amd64_syscall+0x4e2 #9 0xffffffff820da12b at fast_syscall_common+0xf8 lock order ufs -> proctree attempted at: #0 0xffffffff81654742 at witness_checkorder+0x1652 #1 0xffffffff8154553f at _sx_slock_int+0x13f #2 0xffffffff8161106d at uprintf+0x14d #3 0xffffffff81dc075f at ufs_rmdir+0xdf #4 0xffffffff822f912d at VOP_RMDIR_APV+0xcd #5 0xffffffff817b948a at kern_frmdirat+0x87a #6 0xffffffff82135702 at amd64_syscall+0x4e2 #7 0xffffffff820da12b at fast_syscall_common+0xf8 ifaddr cache = 0xfffffe0077b74780 is deleted tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb2800 ifaddr cache = 0xfffffe0077b74180 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: link state changed to DOWN md3: truncating fractional last sector by 4 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP arp: requested protocol length != 4 ktrace write failed, errno 27, tracing stopped for pid 736 ifaddr cache = 0xfffffe006df09000 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: link state changed to DOWN arp: packet with unknown hardware format 0x15 received on tap0 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP ifaddr cache = 0xfffffe00596b7180 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP ifaddr cache = 0xfffffe00596b6c00 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP ifaddr cache = 0xfffffe006df09a80 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 tap2: link state changed to DOWN ktrace write failed, errno 27, tracing stopped for pid 1304 ktrace write failed, errno 27, tracing stopped for pid 767 ktrace write failed, errno 27, tracing stopped for pid 766 ktrace write failed, errno 27, tracing stopped for pid 1015 ktrace write failed, errno 27, tracing stopped for pid 768 ktrace write failed, errno 27, tracing stopped for pid 770 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 ktrace write failed, errno 27, tracing stopped for pid 1 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP ifaddr cache = 0xfffffe0077b74300 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP ktrace write failed, errno 27, tracing stopped for pid 1030 ifaddr cache = 0xfffffe0077b74c00 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: link state changed to DOWN md4: truncating fractional last sector by 8 bytes if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb2800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 ifaddr cache = 0xfffffe006df0a180 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP FreeBSD/amd64 (ci-freebsd-main-1.us-central1-b.c.syzkaller.internal) (ttyu0) login: ifaddr cache = 0xfffffe00596b7180 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1000 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP ifaddr cache = 0xfffffe0077b74300 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb1800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP ifaddr cache = 0xfffffe0077b74780 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 if_delmulti_locked: detaching ifnet instance 0xfffffe0057fb0800 tap2: Ethernet address: 58:9c:fc:10:62:8a tap2: link state changed to UP ifaddr cache = 0xfffffe0077b74c00 is deleted tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe0058555800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058555800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058555800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058555800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058555800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058555800 panic: ASan: Invalid access, 8-byte read at 0xfffffe0057fb0b98, UMAUseAfterFree(fd) cpuid = 0 time = 1755264203 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056f151d0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056f15330 vpanic() at vpanic+0x257/frame 0xfffffe0056f154f0 panic() at panic+0xb5/frame 0xfffffe0056f155b0 kasan_report() at kasan_report+0xdf/frame 0xfffffe0056f15680 ip6_freemoptions() at ip6_freemoptions+0x1ff/frame 0xfffffe0056f156e0 in_pcbfree() at in_pcbfree+0x682/frame 0xfffffe0056f15730 sorele_locked() at sorele_locked+0x264/frame 0xfffffe0056f15770 soclose() at soclose+0x41f/frame 0xfffffe0056f15860 _fdrop() at _fdrop+0x5c/frame 0xfffffe0056f15890 closef() at closef+0x655/frame 0xfffffe0056f15a70 fdescfree() at fdescfree+0xa5e/frame 0xfffffe0056f15c50 exit1() at exit1+0x887/frame 0xfffffe0056f15cf0 sys__exit() at sys__exit+0x28/frame 0xfffffe0056f15d10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056f15f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056f15f30 --- syscall (1, FreeBSD ELF64, _exit), rip = 0x3a1f5a, rsp = 0x820573b38, rbp = 0x820573b40 --- KDB: enter: panic [ thread pid 1470 tid 100375 ] Stopped at kdb_enter+0x6e: movq $0,0x25c4087(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xffffffff81614a6e _vprintf+0x1ae rdx 0 rbx 0xffffffff827cda20 .str.27 rsp 0xfffffe0056f15310 rbp 0xfffffe0056f15330 rsi 0 rdi 0xffffffff81614fd9 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0xfffffe0054152550 r12 0xfffffe0054151780 r13 0xfffffffffffffffe r14 0xffffffff827cda20 .str.27 r15 0 rip 0xffffffff815feb0e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25c4087(%rip) db> show proc Process 1470 (syz-executor) at 0xfffffe0054157568: state: NORMAL uid: 0 gids: 0, 5 parent: pid 770 at 0xfffffe00540e8018 ABI: FreeBSD ELF64 flag: 0x10002000 flag2: 0x40000 arguments: ./syz-executor exec reaper: 0xfffffe0007809010 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe005413d6d8 (map 0xfffffe005413d6d8) (map.pmap 0xfffffe005413d778) (pmap 0xfffffe005413d7e8) threads: 1 100375 Run CPU 0 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 1477 767 767 0 S (threaded) syz-executor 100374 S nanslp 0xffffffff83ba3c00 syz-executor 100935 S aiowc 0xfffffe005414b390 syz-executor 100936 S uwait 0xfffffe0059683300 syz-executor 1470 770 770 0 RE CPU 0 syz-executor 1466 1 768 0 S uwait 0xfffffe0059691d00 syz-executor 1453 1 768 0 S uwait 0xfffffe0059692b00 syz-executor 1439 1 770 0 T syz-executor 1428 0 0 0 DL - 0xffffffff83cb3e00 [soaiod4] 1427 0 0 0 DL - 0xffffffff83cb3e00 [soaiod3] 1426 0 0 0 DL - 0xffffffff83cb3e00 [soaiod2] 1425 0 0 0 DL - 0xffffffff83cb3e00 [soaiod1] 1419 1 1419 0 Ss+ ttyin 0xfffffe00581384b0 getty 1418 1 1418 0 Ss+ ttyin 0xfffffe0058278cb0 getty 1417 1 1417 0 Ss+ ttyin 0xfffffe00594984b0 getty 1416 1 1416 0 Ss+ ttyin 0xfffffe0059498cb0 getty 1415 1 1415 0 Ss+ ttyin 0xfffffe0057e170b0 getty 1414 1 1414 0 Ss+ ttyin 0xfffffe0057e180b0 getty 1413 1 1413 0 Ss+ ttyin 0xfffffe0057e178b0 getty 1412 1 1412 0 Ss+ ttyin 0xfffffe0057e188b0 getty 1411 1 1411 0 Ss+ ttyin 0xfffffe0057e190b0 getty 1406 1 768 0 T syz-executor 1391 1 768 0 S uwait 0xfffffe0059682b00 syz-executor 1384 1 770 0 S uwait 0xfffffe0059691900 syz-executor 1383 1 767 0 S uwait 0xfffffe0059692d80 syz-executor 1375 0 0 0 DL mdwait 0xfffffe0077999000 [md4] 1361 1 768 0 S uwait 0xfffffe0007788e00 syz-executor 1360 1 768 0 S uwait 0xfffffe0059682a00 syz-executor 1353 1 770 0 S uwait 0xfffffe00584d6280 syz-executor 1344 1 767 0 S uwait 0xfffffe00578c8900 syz-executor 1329 1 767 0 S uwait 0xfffffe0007788a00 syz-executor 1299 1 768 0 S uwait 0xfffffe0059691800 syz-executor 1281 1 767 0 S uwait 0xfffffe0059691f00 syz-executor 1280 1 767 0 S uwait 0xfffffe0059692a00 syz-executor 1277 1 767 0 S uwait 0xfffffe0059683a80 syz-executor 1276 1 768 0 S uwait 0xfffffe0059692680 syz-executor 1275 1 767 0 S uwait 0xfffffe0059692580 syz-executor 1250 1 768 0 S uwait 0xfffffe0059690800 syz-executor 1246 1 767 0 S uwait 0xfffffe0059691180 syz-executor 1245 1 767 0 S umtxn 0xfffffe0059692480 syz-executor 1241 0 0 0 DL mdwait 0xfffffe007799a000 [md3] 1228 1 767 -1 S uwait 0xfffffe0059684200 syz-executor 1220 1 768 0 S uwait 0xfffffe0059683800 syz-executor 1219 1 768 0 S uwait 0xfffffe0007788900 syz-executor 1208 1 767 0 S uwait 0xfffffe0059691280 syz-executor 1197 1 768 0 S uwait 0xfffffe0007788d80 syz-executor 1196 1 768 0 S uwait 0xfffffe0059690b80 syz-executor 1174 1 768 0 S uwait 0xfffffe0059684d80 syz-executor 1161 1 768 0 S uwait 0xfffffe0059683200 syz-executor 1134 1 770 0 S uwait 0xfffffe0059691100 syz-executor 1089 0 0 0 DL (threaded) [so_splice] 100495 D - 0xfffffe0007673800 [thr_0] 100496 D - 0xfffffe0007673840 [thr_1] 1054 0 0 0 DL mdwait 0xfffffe0077caf000 [md2] 1053 0 0 0 DL mdwait 0xfffffe00596d3000 [md1] 1030 1015 1030 0 Ss select 0xfffffe006e509740 dhclient 1015 1 423 65 S select 0xfffffe006e51dcc0 dhclient 920 0 0 0 DL mdwait 0xfffffe00596d2000 [md0] 821 0 0 0 DL aiordy 0xfffffe00540fa008 [aiod4] 820 0 0 0 DL aiordy 0xfffffe00540e6560 [aiod3] 819 0 0 0 DL aiordy 0xfffffe00540e7ac0 [aiod2] 818 0 0 0 DL aiordy 0xfffffe00540fa560 [aiod1] 815 0 0 0 DL (threaded) [KTLS] 100126 D - 0xfffffe00083f4300 [thr_0] 100127 D - 0xfffffe00083f4380 [thr_1] 100128 D - 0xffffffff83cb5628 [reclaim_0] 770 766 770 0 S nanslp 0xffffffff83ba3c01 syz-executor 768 766 768 0 R CPU 1 syz-executor 767 766 767 0 S nanslp 0xffffffff83ba3c00 syz-executor 766 764 764 0 S nanslp 0xffffffff83ba3c01 syz-executor 764 762 764 0 Ss sigsusp 0xfffffe00540c4608 csh 762 1 762 0 Ss select 0xfffffe006dc02140 sshd 16 0 0 0 DL syncer 0xffffffff83cc1820 [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cbfd60 [bufdaemon] 100084 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100095 D sdflush 0xfffffe0059916ce8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d0ac80 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83cf0d48 [dom0] 100080 D launds 0xffffffff83cf0d54 [laundry: dom0] 100081 D umarcl 0xffffffff81de25d0 [uma] 7 0 0 0 DL - 0xffffffff8391c5d8 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff843bac30 [pf purge] 5 0 0 0 DL waiting 0xffffffff8485a700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838e6340 [doneq0] 100046 D - 0xffffffff838e62c0 [async] 100075 D - 0xffffffff838e6140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cec640 [crypto] 100043 D crypto_ 0xfffffe00083f6a30 [crypto returns 0] 100044 D crypto_ 0xfffffe00083f6a80 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b4c600 [g_event] 100038 D - 0xffffffff83b4c620 [g_up] 100039 D - 0xffffffff83b4c640 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83ced0e0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c40ff0 [swapper] 100005 D - 0xfffffe00083e0a00 [softirq_0] 100006 D - 0xfffffe00083e0900 [softirq_1] 100007 D - 0xfffffe00083e0800 [if_io_tqg_0] 100008 D - 0xfffffe00083e0700 [if_io_tqg_1] 100009 D - 0xfffffe00083e0600 [if_config_tqg_0] 100010 D - 0xfffffe00083f8000 [kqueue_ctx taskq] 100011 D - 0xfffffe00083f7e00 [jail_remove taskq] 100012 D - 0xfffffe00083f7d00 [bus taskq] 100015 D - 0xfffffe00083f7a00 [thread taskq] 100017 D - 0xfffffe00083f7800 [aiod_kick taskq] 100018 D - 0xfffffe00083f7700 [deferred_unmount ta] 100019 D - 0xfffffe00083f7600 [inm_free taskq] 100020 D - 0xfffffe00083f7500 [in6m_free taskq] 100021 D - 0xfffffe00083f7400 [linuxkpi_irq_wq] 100022 D - 0xfffffe00083f7300 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00083f7300 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00083f7300 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00083f7300 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00083f7200 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00083f7200 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00083f7200 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00083f7200 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00083f7100 [firmware taskq] 100040 D - 0xfffffe00083f6b00 [crypto_0] 100041 D - 0xfffffe00083f6b00 [crypto_1] 100056 D - 0xfffffe00083f6700 [vtnet0 rxq 0] 100057 D - 0xfffffe00083f6600 [vtnet0 txq 0] 100058 D - 0xfffffe00083f6500 [vtnet0 rxq 1] 100059 D - 0xfffffe00083f6400 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057f68b80 [virtio_balloon] 100065 D - 0xffffffff827d2101 [deadlkres] 100069 D - 0xfffffe005854fa00 [acpi_task_0] 100070 D - 0xfffffe005854fa00 [acpi_task_1] 100071 D - 0xfffffe005854fa00 [acpi_task_2] 100073 D - 0xfffffe00083f8100 [mca taskq] 100074 D - 0xfffffe00083f6900 [CAM taskq] 100076 D - 0xfffffe005854f900 [ipsec_offload] 100938 D - 0xfffffe005854f800 [netlink_socket (PID] 1474 1470 770 0 Z syz-executor db> show all locks Process 768 (syz-executor) thread 0xfffffe005409f000 (100105) exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007dffd60) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:1752 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006dfcac78) locked @ /syzkaller/managers/main/kernel/sys/ufs/ffs/ffs_vfsops.c:1751 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006dfc93e0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_lookup.c:1169 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 400 5474K 1301 tcp_hpts 7 4801K 7 devbuf 4187 4323K 4217 sysctloid 35572 2096K 35647 vtbuf 24 1968K 46 kobj 330 1320K 543 newblk 37 1033K 3263 vfscache 3 1025K 3 pcb 51 692K 854 filedesc 71 566K 1163 inodedep 28 523K 985 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 204 374K 1613 vmem 5 272K 7 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 21014 acpica 1674 184K 54438 tidhash 3 141K 3 pagedep 16 132K 456 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 111 111K 176 sem 4 106K 4 gtaskqueue 18 98K 18 bus 1004 82K 5082 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 522 66K 526 ddb_capture 1 64K 1 kdtrace 270 53K 2425 umtx 416 52K 416 LRO 48 49K 82 routetbl 964 42K 2749 shm 2 34K 10 DEVFS3 130 33K 156 hostcache 1 32K 1 msg 4 30K 4 kbdmux 6 28K 6 BPF 18 28K 65 netlink 10 27K 413 temp 32 21K 3402 md_disk 6 21K 9 DEVFS_RULE 56 20K 56 ifaddr 65 18K 214 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 GEOM 74 16K 553 ithread 90 15K 90 bus-sc 34 15K 1653 eventhandler 163 14K 163 cred 34 13K 458 lltable 41 13K 186 ifnet 7 13K 23 shmfd 10 12K 23 kenv 95 12K 95 CAM queue 5 11K 1528 ether_multi 124 10K 678 rman 82 10K 457 rpc 8 9K 8 bmsafemap 3 9K 793 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 5 pfs_vncache 1 8K 1 audit_evclass 240 8K 303 in6_multi 56 8K 235 taskqueue 72 8K 105 plimit 18 7K 806 kqueue 91 7K 2065 sglist 6 7K 6 CAM DEV 3 6K 510 pf_ifnet 16 6K 100 pfs_nodes 22 6K 22 pwddesc 80 5K 1509 sctp_atcl 13 5K 350 ufs_dirhash 24 5K 39 UMA 272 5K 272 vt 11 5K 11 filecaps 2 5K 98 memdesc 1 4K 1 MCA 32 4K 32 md_sectors 1 4K 1 evdev 4 4K 4 sctp_ifa 28 4K 46 acpisem 28 4K 28 sctp_stro 3 3K 10 terminal 11 3K 11 uidinfo 6 3K 21 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 DEVFSP 36 3K 295 proc-args 84 3K 3036 crypto 8 3K 56 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 CC Mem 15 2K 328 lockf 16 2K 305 session 14 2K 76 Unitno 28 2K 161 kcovinfo 27 2K 180 ip6ndp 11 2K 46 CAM XPT 22 2K 543 sctp_timw 6 2K 6 diradd 12 2K 738 tun 4 2K 20 toponodes 6 2K 6 ipsecpolicy 2 2K 2 freework 6 2K 935 newdirblk 10 2K 423 dirrem 5 2K 688 mkdir 10 2K 844 freeblks 5 2K 489 in_multi 5 2K 30 msi 9 2K 9 inpcbpolicy 34 2K 965 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 52 NFSD session 1 1K 1 mount 19 1K 798 CAM periph 4 1K 271 osd 21 1K 346 ipsec 3 1K 3 freefile 6 1K 605 mld 6 1K 22 igmp 6 1K 22 pfil 6 1K 6 selfd 12 1K 63151 isadev 6 1K 10 pci_link 10 1K 10 sctp_ifn 5 1K 46 encap_export_host 12 1K 12 select 5 1K 74 sctp_atky 16 1K 361 frag6 6 1K 10 ip6opt 3 1K 49 cdev 2 1K 2 lkpikmalloc 8 1K 9 counter_rate 13 1K 13 chacha20random 1 1K 1 biobuf 1 1K 1 vnodes 3 1K 17 ktls 3 1K 29 indirdep 1 1K 980 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 sctp_athm 13 1K 351 pf_osfp 2 1K 2 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 cryptodev 2 1K 143 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 ktls_ocf 1 1K 4 in6_mfilter 2 1K 23 aio 4 1K 8 eventfd 1 1K 6 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 sctp_map 6 1K 20 sctp_vrf 1 1K 1 sctp_aadr 1 1K 24 ip6_msource 1 1K 10 ip_msource 1 1K 15 vnet 1 1K 1 pmc 1 1K 1 filedesc_to_leader 1 1K 2 entropy 2 1K 51 acpiintr 1 1K 1 cpus 2 1K 2 ip6_moptions 1 1K 15 vnet_data_free 1 1K 1 fadvise 1 1K 44 Per-cpu 1 1K 1 p1003.1b 1 1K 1 ext2_mount 0 0K 0 ext2_node 0 0K 0 ext2_extents 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 19 sctp_iter 0 0K 68 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 68 sctp_stri 0 0K 2 tcp_pcm_rack 0 0K 4 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 8 mqdata 0 0K 0 filemon 0 0K 11 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 1 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 1868 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 24 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 217 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 32 ipsecrequest 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_moptions 0 0K 20 in_mfilter 0 0K 32 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 24 VN POLL 0 0K 15 statfs 0 0K 203 namei_tracker 0 0K 4 inotify 0 0K 34 export_host 0 0K 0 cl_savebuf 0 0K 102 lio 0 0K 12 acl 0 0K 0 soname 0 0K 3712 mbuf_tag 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 procdesc 0 0K 12 iov 0 0K 16424 ioctlops 0 0K 260 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 396 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 689 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 16 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 3 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 102 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 3 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 359 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 18448 0 254 38494208 0 tcp_log 416 5197 4460 39530 0 254 4017312 0 mbuf 256 8901 761 39829 0 254 2473472 0 BUF TRIE 152 317 11487 3210 0 62 1794208 0 malloc-384 384 4218 42 4384 0 30 1635840 0 RADIX NODE 152 7219 2786 67663 0 62 1520760 0 malloc-128 128 11678 195 15993 0 126 1519744 0 malloc-4096 4096 333 5 764 0 2 1384448 0 UMA Slabs 0 112 11364 6 11364 0 126 1273440 0 malloc-64 64 4026 15819 84772 0 254 1270080 0 malloc-65536 65536 15 3 98 0 1 1179648 0 sctp_asoc 2256 3 507 10 0 254 1150560 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 malloc-16384 16384 42 21 586 0 1 1032192 0 vmem btag 56 18326 73 18326 0 254 1030344 0 socket 1024 57 707 2764 0 254 782336 0 FFS inode 1168 596 20 1237 0 8 719488 0 sctp_ep 1152 10 501 339 0 254 588672 0 md4 32768 16 0 16 0 1 524288 0 lkpicurr 168 2 3094 2 0 62 520128 0 256 Bucket 2048 229 21 1514 0 8 512000 0 malloc-4096 4096 90 30 2043 0 2 491520 0 pbuf 2624 0 178 0 0 2 467072 0 VM OBJECT 248 1208 536 22744 0 62 432512 0 THREAD 1860 187 21 938 0 8 386880 0 sctp_raddr 736 3 514 10 0 254 380512 0 DEVCTL 1024 227 101 354 0 0 335872 0 VNODE 440 634 86 1294 0 30 316800 0 malloc-2048 2048 13 139 342 0 8 311296 0 MAP ENTRY 96 1627 1271 78368 0 126 278208 0 malloc-32768 32768 4 4 38 0 1 262144 0 malloc-2048 2048 5 123 1142 0 8 262144 0 malloc-2048 2048 106 14 150 0 8 245760 0 malloc-16 16 14758 242 19748 0 254 240000 0 malloc-65536 65536 1 2 6 0 1 196608 0 malloc-32768 32768 0 6 1001 0 1 196608 0 malloc-32 32 5516 406 8285 0 254 189504 0 UMA Zones 768 244 0 244 0 16 187392 0 FPU_save_area 832 189 36 1344 0 16 187200 0 malloc-128 128 1147 248 25328 0 126 178560 0 FFS2 dinode 256 596 94 1236 0 62 176640 0 lkpimm 56 1 3095 1 0 254 173376 0 PROC 1368 81 40 1485 0 8 165528 0 unpcb 320 10 506 1360 0 254 165120 0 malloc-1024 1024 140 20 1766 0 16 163840 0 malloc-128 128 1071 200 2992 0 126 162688 0 S VFS Cache 104 1065 456 1777 0 126 158184 0 malloc-256 256 55 515 3388 0 62 145920 0 filedesc0 1072 81 45 1509 0 8 135072 0 malloc-65536 65536 0 2 110 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-32768 32768 3 1 12 0 1 131072 0 malloc-256 256 372 138 4129 0 62 130560 0 mbuf_packet 256 26 482 1641 0 254 130048 0 tcp_inpcb 1304 17 79 328 0 8 125184 0 ksiginfo 112 102 942 341 0 126 116928 0 128 Bucket 1024 70 29 319 0 16 101376 0 64 Bucket 512 131 61 8000 0 30 98304 0 malloc-384 384 38 202 1163 0 30 92160 0 malloc-8192 8192 6 5 25 0 1 90112 0 malloc-4096 4096 20 2 350 0 2 90112 0 UMA Kegs 384 230 3 230 0 30 89472 0 ertt_txseginfo 40 0 2121 8964 0 254 84840 0 malloc-2048 2048 34 6 273 0 8 81920 0 malloc-256 256 61 254 471 0 62 80640 0 sctp_chunk 152 3 517 5 0 254 79040 0 malloc-4096 4096 15 3 28 0 2 73728 0 g_bio 408 0 180 19570 0 30 73440 0 malloc-64 64 559 512 17548 0 254 68544 0 tcp_bbr_map 128 0 527 951 0 126 67456 0 malloc-128 128 376 151 830 0 126 67456 0 malloc-65536 65536 0 1 8 0 1 65536 0 malloc-256 256 116 139 1734 0 62 65280 0 malloc-256 256 49 206 1752 0 62 65280 0 malloc-256 256 72 183 777 0 62 65280 0 32 Bucket 256 97 158 10522 0 62 65280 0 Files 80 181 619 13176 0 126 64000 0 udp_inpcb 408 8 145 499 0 30 62424 0 malloc-384 384 123 27 466 0 30 57600 0 VMSPACE 584 50 48 1450 0 16 57232 0 malloc-64 64 480 339 4021 0 254 52416 0 malloc-64 64 462 357 665 0 254 52416 0 malloc-128 128 124 279 2704 0 126 51584 0 DIRHASH 1024 34 14 45 0 16 49152 0 NAMEI 1024 10 38 22148 0 16 49152 0 malloc-8192 8192 6 0 6 0 1 49152 0 malloc-4096 4096 4 8 87 0 2 49152 0 malloc-1024 1024 14 34 528 0 16 49152 0 malloc-384 384 28 92 993 0 30 46080 0 pcpu-8 8 4865 767 7702 0 254 45056 0 syncache 168 0 264 3 0 254 44352 0 vnpbuf 2624 0 16 7 0 16 41984 0 malloc-8192 8192 2 3 52 0 1 40960 0 malloc-8192 8192 4 1 7 0 1 40960 0 pipe 736 24 31 475 0 16 40480 0 cpuset 200 43 149 180 0 62 38400 0 da_ccb 544 0 70 5008 0 16 38080 0 hostcache 64 3 564 3 0 254 36288 0 malloc-64 64 16 551 37 0 254 36288 0 malloc-64 64 8 559 68 0 254 36288 0 malloc-64 64 150 417 703 0 254 36288 0 malloc-64 64 13 554 706 0 254 36288 0 malloc-32 32 962 172 1209 0 254 36288 0 malloc-128 128 64 215 196 0 126 35712 0 malloc-128 128 15 264 943 0 126 35712 0 malloc-128 128 84 195 116 0 126 35712 0 ktls_session 256 1 134 7 0 62 34560 0 routing nhops 256 25 110 104 0 62 34560 0 ttyoutq 256 72 63 448 0 62 34560 0 malloc-384 384 35 55 478 0 30 34560 0 malloc-256 256 12 123 664 0 62 34560 0 malloc-256 256 37 98 1311 0 62 34560 0 TURNSTILE 136 209 43 209 0 62 34272 0 ripcb 376 8 82 120 0 30 33840 0 SLEEPQUEUE 88 209 175 209 0 126 33792 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-32768 32768 0 1 1 0 1 32768 0 malloc-16384 16384 0 2 190 0 1 32768 0 malloc-4096 4096 1 7 27 0 2 32768 0 malloc-2048 2048 3 13 15 0 8 32768 0 malloc-2048 2048 3 13 3 0 8 32768 0 malloc-2048 2048 0 16 50 0 8 32768 0 malloc-2048 2048 8 8 216 0 8 32768 0 malloc-1024 1024 2 30 62 0 16 32768 0 malloc-1024 1024 2 30 3 0 16 32768 0 malloc-1024 1024 16 16 23 0 16 32768 0 malloc-1024 1024 7 25 308 0 16 32768 0 malloc-1024 1024 2 30 159 0 16 32768 0 malloc-512 512 1 63 111 0 30 32768 0 malloc-512 512 10 54 65 0 30 32768 0 malloc-512 512 2 62 165 0 30 32768 0 malloc-512 512 5 59 117 0 30 32768 0 malloc-512 512 1 63 110 0 30 32768 0 malloc-512 512 6 58 79 0 30 32768 0 malloc-512 512 1 63 3 0 30 32768 0 pcpu-64 64 501 11 501 0 254 32768 0 tcp_bbr_pcb 896 0 36 10 0 16 32256 0 sctp_stream_msg_out 112 0 288 1 0 254 32256 0 ttyinq 160 135 65 840 0 62 32000 0 tcp_log_id_node 120 2 262 5 0 126 31680 0 PGRP 120 17 247 96 0 126 31680 0 clpbuf 2624 0 12 141 0 4 31488 0 sctp_laddr 48 8 580 114 0 254 28224 0 rl_entry 48 12 576 19 0 254 28224 0 malloc-32 32 273 609 3026 0 254 28224 0 malloc-32 32 53 829 2024 0 254 28224 0 16 Bucket 144 87 109 575 0 62 28224 0 4 Bucket 48 8 580 25 0 254 28224 0 AIO 208 1 132 73 0 62 27664 0 mqnode 416 4 59 4 0 30 26208 0 udplite_inpcb 408 3 60 18 0 30 25704 0 malloc-8192 8192 1 2 106 0 1 24576 0 malloc-4096 4096 5 1 16 0 2 24576 0 PWD 40 34 572 457 0 254 24240 0 rtentry 168 28 116 104 0 62 24192 0 8 Bucket 80 93 207 559 0 126 24000 0 itimer 352 0 66 59 0 30 23232 0 malloc-384 384 11 49 11 0 30 23040 0 malloc-384 384 20 40 82 0 30 23040 0 domainset 40 0 567 163 0 254 22680 0 Mountpoints 2816 2 6 9 0 4 22528 0 ertt 72 15 265 328 0 126 20160 0 malloc-32 32 44 586 157 0 254 20160 0 malloc-32 32 50 580 1060 0 254 20160 0 malloc-32 32 112 518 1539 0 254 20160 0 malloc-32 32 41 589 776 0 254 20160 0 2 Bucket 32 90 540 769 0 254 20160 0 KNOTE 160 1 124 328 0 62 20000 0 tcp_rack_map 128 0 155 12 0 126 19840 0 cryptop 280 0 70 9 0 30 19600 0 AIOCB 552 0 35 85 0 16 19320 0 L VFS Cache 320 0 60 70 0 30 19200 0 AIOLIO 272 0 70 12 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 0 1 2 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-1024 1024 0 16 7 0 16 16384 0 malloc-512 512 1 31 1 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 ipq 56 0 288 1 0 254 16128 0 mqueue 248 1 63 1 0 62 15872 0 kenv 258 17 43 1070 0 30 15480 0 tcp_rack_pcb 1088 0 14 4 0 8 15232 0 SMR SHARED 24 8 503 8 0 254 12264 0 tcp_log_id_bucket 176 2 67 3 0 62 12144 0 malloc-16 16 30 720 359 0 254 12000 0 malloc-16 16 7 743 157 0 254 12000 0 malloc-16 16 274 476 633 0 254 12000 0 malloc-16 16 102 648 527 0 254 12000 0 malloc-16 16 185 565 3019 0 254 12000 0 malloc-16 16 19 731 25074 0 254 12000 0 malloc-16 16 21 729 456 0 254 12000 0 splice 184 0 63 1 0 62 11592 0 malloc-384 384 1 29 1 0 30 11520 0 swrbuf 2624 0 4 4 0 4 10496 0 malloc-8192 8192 1 0 1 0 1 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 vtnet_tx_hdr 24 0 334 4157 0 254 8016 0 UMA Slabs 1 176 10 12 10 0 62 3872 0 KMAP ENTRY 96 15 24 35 0 0 3744 0 tfo 4 0 493 1 0 254 1972 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf Ethernet anchors 1240 0 0 0 0 64 0 0 pf anchors 1664 0 0 0 0 64 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 sackhole 32 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 MAC labels 40 0 0 0 0 254 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-4096 4096 0 0 0 0 2 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl