last executing test programs: 6.183050513s ago: executing program 3 (id=4): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare}}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0xf000000) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0xffff, 0x1009, &(0x7f00000000c0)=0x205, 0x47) r4 = openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0) setregid(0x0, 0xee00) setregid(0x0, 0x0) aio_write(&(0x7f0000000240)={r4, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe, @thr={0x0, 0x0}}}) connectat$unix(r4, r4, &(0x7f00000000c0)=@file={0xa, 0x0, './file0\x00'}, 0xa) r5 = kqueue() kevent(r5, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x1b, 0x3, 0x0) r7 = socket(0x26, 0x2, 0x0) bind(r7, 0x0, 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000080)={@broadcast, @local, [], {@arp={0x806, @generic={0x18, 0x7003, 0x6, 0x9, 0x1, @local, "a7681ceacfdf04ee51", @random="364acd47a1a4", "2f6bc0b9fa0909ed61e939b7338bf5ad"}}}}) recvmsg(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1, 0x0}, 0x2) sendto$inet6(r6, &(0x7f0000000000)="0212010002000000000000008fc30d4e", 0x10, 0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000340)="717fcbd69117f6eeda5e6f9cb6606aa222eb4023423af44b7a92308f76df45ea32e5adcb84193baa1d07e52c4335fd24cf1badfb3602f11c2f1defdd39f599a4249587ae884a09c2ba27325e076cd2b7ee9174cdb2a2fb2c5b8e8aa6bb4d62e9727b0f") r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) preadv(r8, 0x0, 0x0, 0x0) cpuset_setaffinity(0x3, 0x9, 0x1000000, 0xcf, &(0x7f00000000c0)) fsync(r1) 5.772382749s ago: executing program 0 (id=6): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x6, 0x4) 5.161193463s ago: executing program 0 (id=7): ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000040)={0x17, 0x24, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfdffffff, [0x0, 0x4]}) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = kqueue() socket$inet6_sctp(0x1c, 0x1, 0x84) open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) kqueue() __specialfd$eventfd(0x1, &(0x7f0000000040), 0x8) kevent(r0, &(0x7f0000000340)=[{0x7, 0xfffffffffffffff3, 0x4009, 0xc0000002, 0x1a8, 0x2, [0x0, 0xd85, 0x7ff, 0x4]}], 0x1, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x800, 0x0, 0x7ff, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000) 5.020656955s ago: executing program 0 (id=9): freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) open$dir(&(0x7f0000000200)='./file0\x00', 0x4, 0x180) accept$unix(r0, &(0x7f0000000100)=@file={0xfc, 0x0, ""/250}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) 4.855671555s ago: executing program 0 (id=11): msgsnd(0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRES64], 0x401, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x800) kevent(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) freebsd11_getfsstat(&(0x7f00000006c0), 0xfffffea4, 0x2) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x6500) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x602, 0x0) r1 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ftruncate(r0, 0x80000001003864) write(r0, &(0x7f0000000080)="0095743d9f438929966646495da8e88bd6aa04f42a5f8ca82c97370470006f63d1ced0b08f0506f3d526c0d96ccdbbb91deca2e6c20e623ea0588ee91abc50ee2a75065484166464941540589917f9cda2666520e333424d1a39240c7e18fcd0c737f3f1db2661f1b51da36d6eae97f73426d0bfa092a46113fe6d70218f047a0587c0b3", 0x2b7bd7d216c1e05f) sendto(0xffffffffffffffff, 0x0, 0xfffffffffffffdd5, 0x20084, 0x0, 0x0) fstatat(0xffffffffffffffff, 0x0, 0x0, 0xc000) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, &(0x7f0000000040)={0x29, 0x0, 0x20, &(0x7f0000000080)="3c022e61792eecb07f8aee18e5aa3505d7dbce4235fc3735fbe8e5aa4f4bb674", 0x0, 0x0, 0x0, 0xfdffffff, [0x8]}) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) socket(0x1c, 0x1, 0x0) 4.18734264s ago: executing program 3 (id=13): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000300)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, @sival_int, @spare}}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0xf000000) r2 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0xffff, 0x1009, &(0x7f00000000c0)=0x205, 0x47) r4 = openat(0xffffffffffffff9c, 0x0, 0x200201, 0x0) setregid(0x0, 0xee00) setregid(0x0, 0x0) aio_write(&(0x7f0000000240)={r4, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe, @thr={0x0, 0x0}}}) connectat$unix(r4, r4, &(0x7f00000000c0)=@file={0xa, 0x0, './file0\x00'}, 0xa) r5 = kqueue() kevent(r5, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x1b, 0x3, 0x0) r7 = socket(0x26, 0x2, 0x0) bind(r7, 0x0, 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000080)={@broadcast, @local, [], {@arp={0x806, @generic={0x18, 0x7003, 0x6, 0x9, 0x1, @local, "a7681ceacfdf04ee51", @random="364acd47a1a4", "2f6bc0b9fa0909ed61e939b7338bf5ad"}}}}) recvmsg(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1, 0x0}, 0x2) sendto$inet6(r6, &(0x7f0000000000)="0212010002000000000000008fc30d4e", 0x10, 0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) mount(&(0x7f0000000000)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000340)="717fcbd69117f6eeda5e6f9cb6606aa222eb4023423af44b7a92308f76df45ea32e5adcb84193baa1d07e52c4335fd24cf1badfb3602f11c2f1defdd39f599a4249587ae884a09c2ba27325e076cd2b7ee9174cdb2a2fb2c5b8e8aa6bb4d62e9727b0f") r8 = open$dir(0x0, 0x10000, 0x0) preadv(r8, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) cpuset_setaffinity(0x3, 0x9, 0x1000000, 0xcf, &(0x7f00000000c0)) fsync(r1) 3.959464667s ago: executing program 2 (id=14): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00', 0xd}, 0x24) open(0x0, 0x615, 0x0) r2 = open$dir(&(0x7f0000000840)='./file0\x00', 0x2, 0x24) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="16", 0x1}], 0x1, 0xb542) lchflags(&(0x7f0000000400)='./file0\x00', 0x60091) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x658, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x60280, &(0x7f00000000c0)={0x1c, 0x1c, 0x2, 0x8, @remote={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet6_tcp_buf(r1, 0x6, 0x23, &(0x7f0000002680)=""/4088, &(0x7f0000000000)=0xff8) r3 = shmget(0x1, 0x1000, 0x50, &(0x7f0000ffd000/0x1000)=nil) freebsd11_getfsstat(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x1d8, 0x1) freebsd11_getfsstat(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0xfcf8, 0x0) r6 = shmget(0x3, 0x3000, 0x544, &(0x7f0000ffb000/0x3000)=nil) r7 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r7, 0x0, 0x0) fstat(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgrp(0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{r8, r9, r8, r9, 0xc1, 0xab8e, 0x0, 0x81}, 0x9bc, 0x2, 0xe, 0x1, 0x0, 0x1000, 0x0, r10}) r11 = getpid() rtprio(0x0, r11, &(0x7f0000000280)={0x4, 0x20}) shmctl$IPC_SET(r6, 0x1, &(0x7f00000002c0)={{r5, r9, r8, 0xffffffffffffffff, 0x81}, 0x1, 0x5, 0x1, 0x810, r11, r11, 0x5}) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) procctl$PROC_REAP_KILL(0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x4c5ba421, 0x786b76aa, 0xffffffffffffffff, 0x1}) shmctl$IPC_SET(r3, 0x1, &(0x7f00000003c0)={{r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x82, 0x8, 0x0, 0xfffffffffffffff9}, 0xfffffffd, 0x2, 0x400000, 0x5, 0x0, r12, 0x19e}) setreuid(r5, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000000)={0x15, 0x0, 0x20, &(0x7f0000000940)="0b6fac4103e7a00d4689e808d0d4755aedaacdd4743c7eaa2c7300d05fe86026", 0x0, 0x0, 0x40, 0x7d86699a, [0x0, 0x0, 0x0, 0x3]}) ioctl$CIOCCRYPT(r0, 0xc0306367, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x10000, &(0x7f0000000380), 0x0, 0x0, 0x0}) 3.779225204s ago: executing program 2 (id=15): r0 = socket(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x62, 0x1c, 0x3, 0xfffffffb, @loopback}, 0x1c) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ftruncate(r1, 0x107d2) sigaction(0x6, &(0x7f0000000200)={&(0x7f0000000340)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x35, {[0xfffff801, 0x50e5, 0xfffffffe]}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000a00)={0x1, 0x6, @sival_ptr=0x200000000341, @spare=[0x101, 0x3, 0x0, 0x2e1, 0x7, 0x3, 0x5, 0x8]}) sigaction(0xd, &(0x7f0000000140)={0x0, 0x18, {[0x0, 0x0, 0x400003]}}, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x10, 0x2, 0x3, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sigtimedwait(&(0x7f0000000000)={[0xfffffffd, 0x6, 0xffff0520, 0x8]}, 0x0, 0x0) fspacectl(r1, 0x1, &(0x7f0000000100)={0x0, 0xffff}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty, 0xfffffffc}, 0x1c) mount(&(0x7f0000000040)='ufs\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x2000000, 0x126) sendto$inet6(r0, &(0x7f0000000280)="5a4f42c8d1e1d67e0d408ac98b3e3f0d1a029b3a77a09a3dcdeb9f17172836e87ece61171d8bef4e772a1428", 0x2c, 0x20001, 0x0, 0x0) sendfile(r3, r0, 0x1, 0x0, 0x0, 0x0, 0x19) 3.637446444s ago: executing program 1 (id=16): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x6, 0x4) 3.624824306s ago: executing program 0 (id=17): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x68e, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, &(0x7f00000003c0)={0x7, 0x5}, 0x8) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000000)="727f4c98e6e3b6d62e469a3ba2e66dba9106d9b78a10424b95805142", 0x1c, 0x185, &(0x7f0000000280)={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) r2 = openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) lseek(r3, 0xfffffffffffffffd, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) fhstat(0x0, &(0x7f0000001ac0)) getresgid(&(0x7f0000001bc0), &(0x7f0000001c00)=0x0, &(0x7f0000001c40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) fstatat(r2, &(0x7f0000001c80)='./file0\x00', 0x0, 0x8000) freebsd11_stat(0x0, 0x0) getresgid(&(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00)) getgroups(0x3, &(0x7f00000002c0)=[0x0, r4, 0x0]) r5 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x602, 0x0) r7 = freebsd12_shm_open(0x0, 0x200, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x12, r7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ftruncate(r6, 0x80000001003864) write(r6, &(0x7f0000000080), 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x54, &(0x7f0000000180)={0x4, {{0x1c, 0x1c, 0x1, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x100}}, {{0x1c, 0x1c, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000}}}, 0x108) 3.29850171s ago: executing program 1 (id=18): mkdir(&(0x7f00000000c0)='./file1\x00', 0x1) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setresgid(0xee00, 0x0, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) sysarch$I386_GET_IOPERM(0x3, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x10000, 0x0) r1 = socket(0x1c, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) sendto$inet(r1, &(0x7f0000000000)="f6", 0x1, 0x4cbf0000, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) r3 = fork() sigqueue(r3, 0x0, @sigval_int=0x20) r4 = kqueue() kevent(r4, &(0x7f0000000380)=[{0x4, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, [0x0, 0x1, 0x0, 0x3]}], 0x1, 0x0, 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file0/file0\x00', r2, &(0x7f0000000380)='./file1\x00') 2.108797507s ago: executing program 2 (id=19): r0 = socket$inet6(0x1c, 0x3, 0x0) openat$bpf(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) kmq_timedreceive(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x100000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$DIOCRADDADDRS(r2, 0xc0184415, &(0x7f0000000a80)={{"df45187d7638f2f7bc836152843806587e7ee1bd3970459cb2cbee8401dfc33320b75ccfd729a25b38df20b45c678215f49f53e09510b4b6914adcbc90ab07184b0ad82cd7384ed6c40686e93601819fb0b534d30b825c4b6f32dd0aeb13594b1d5d6e18070f475c62040e767a1675dafa428bd4cd50ba75aa99251bd476be7ed22a9b2f9d35db8e7d6672a9caba297d7ca6d23a0605562b94441d0c29b7be1f9685a2536b2a38da8c2d5eb87f3c489a956ed8ee3698d520ef8089198bc3429a67e0865de9152749003cfcabeeda083606cd1decd7b9eac2f2b36dc8848d9ec57747f51da25acd9070f37b11ac8c6f031bea2d6ec44f4222f106f1fbb9711ecce444ef7ffb7edc53bef1149ead739c6452d65c392c95425e281a6d68e8a449eab0e678af021a9b565da5ab53a4d452cc890b61412baaf8ebb313f553cbf95f715ee19e907bb0caed501e48a66509799b8257d03a2298d92002049ee5b0cc7980794513eda1fe9483c9a7fe0d64bd813e7e4218d8fa8550d94e2341d21d7f410af62c9ea1827e6249af29ce2e96cfc6028576160b54a9622dc58b629276d399c1094a20683e8e091bd1ed2c7045a949309daf5aca74652701f4e26c2d530eef192c1b713216c8c677fff95d9104097a3da48d674e5fb106e6b1c79639a341f4191044ae3ae1dbc112f1c1574d3cf8fd148326dd5e7d73b6940978413f5198caa090c0a4541775bff5851e09f5d6bfc7bf5b4902a282709216bda29d6c6aa64446aaeead04633f0dcd83c4b87964564108220d13a1a11ddea1006ce04c6ab96362e9f7780b82e8627f9298430855b151bc2c8429fa6fc1c9486388103f62e96bcbd87fec7d2f8b460f5973493a987bbafe8200000000595a645af34a594644dd369be6c42dcc99d9306f5fd7f963675bfe9aa133b7ec8d578f21e878a5f29d56af3887f8b5bc09e1363848e7ad02a9b1a4ad1da369869cfc2123e13588d249b8c0aab32534c4b6f1fbce459ce19f75f5153107c2884c6740bc04843b3f844d147061f4ccbe71c0e27eb42a370756560ecd81ad1ded939926794889b64e42c16830c07c99325f0e69c9daeded96af750e3894b819592f9fe1a6ecb7a9b99253ba4e8b4673dd4b14c7da84bd4e020080f18c3d07031cb9501828b6fc6eae4e94717d8cd8d9bd7f4d16653d5ac50a53858493fd7a747e35868ad247ce1865f8397827bdb2ff4dbda235b81813214a96ffc7db32dee1656be4fa080b61aab0b70a0646ef2d98106742fc28efd8c4858c4464b2a3f2c3d9b9df3832af68b77ba8ad698eddae6c38d90709c11b4e962ae43ad62d987a7b292be9c00b44671a1fc6c921ef9a4653883602c38c1fba148f3f1e1117ba61e080eb3991d8e8205b8e999adf52ab01cec50ec27d4c11b100", "0920cf14d501a846a22d8eb300fbff040000000000000000aa00"}, 0x0, 0x14, 0x0, 0x0, 0x20000002, 0xb, 0x0, 0xfffffffffffffffe}) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) fhstat(&(0x7f0000000040)={{[0x5c8951ac, 0x3bea9983]}, {0x0, 0x0, "3d0000009b1557d800"}}, 0x0) open(0x0, 0x10200, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}, 0x1c) r3 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) ioctl$CIOCGSESSION2(r3, 0xc040636a, &(0x7f0000000080)={0x10, 0x8, 0x1, &(0x7f0000000740)='\x00', 0x1, &(0x7f00000000c0)='\"', 0x1000, 0x7d86619b, [0x0, 0x9, 0xc]}) ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000000140)={0x0, 0x2, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x51, &(0x7f00000000c0)={0x800, {{0x1c, 0x1c, 0x0, 0x100, @mcast1, 0x3}}}, 0x88) setsockopt$inet6_int(r0, 0x29, 0xa, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d60f16", 0x28, 0x67, 0x0, @rand_addr="abbde059ff7a43f702cee73684eec42d", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @local={0xfe, 0x80, '\x00', 0x0}}}}}}}) 1.324448497s ago: executing program 0 (id=20): openat$crypto(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6(0x1c, 0x2, 0x0) r0 = kqueue() fcntl$getown(r0, 0x5) kevent(r0, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x3, 0x4f, 0x0, 0x0, [0x0, 0xffffffffffffffff, 0x0, 0x404]}], 0x1, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, &(0x7f00000001c0)={0x0, 0x6}, 0x8) rfork(0x85000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x41, &(0x7f0000000280)=0x28268231, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x10, 0x2, 0x2, @multicast2}, 0x10) r4 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a88f3d4db5"]) setsockopt$sock_int(r4, 0xffff, 0x1001, 0x0, 0x0) kqueue() open(0x0, 0x8000, 0x40) bind$inet6(r4, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x32, &(0x7f0000000240)=ANY=[], 0x8) connect$inet6(r4, 0x0, 0x0) mkdir(0x0, 0x0) setreuid(0xee00, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800400000000000000000009078000000001221"]) r5 = getuid() setreuid(0x0, r5) sysarch$I386_CLEAR_PKRU(0xd, &(0x7f00000023c0)={0x0, 0x0, 0x9}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x53, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) 1.120493589s ago: executing program 1 (id=21): sysarch$AMD64_CLEAR_PKRU(0x87, 0x0) r0 = open$dir(&(0x7f0000000840)='./file1\x00', 0x800, 0x1a6) chflagsat(r0, &(0x7f0000000180)='./file0\x00', 0x1, 0x2000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0xc00, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f00000000c0)={0x0, 0x18, 0x0, 0x0, 0x18, &(0x7f0000000040)="70638953e90cef7e00080000000b000000000000916d99e9", 0x9, 0xfdffffff, [0x10000000, 0x2]}) ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f00000000c0)={0x16, 0x23, 0x20, &(0x7f0000001940)="0b8aac4103e7a00d4689e808d0d4ac4199755aedaacdd4743c7eaa2c87d841fc", 0x0, 0x0, 0x80000000, 0x3, [0x7, 0x0, 0x3]}) aio_waitcomplete(0x0, &(0x7f0000001c00)={0x0, 0x900000}) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) fork() chroot(&(0x7f00000000c0)='.\x00') renameat(r3, &(0x7f0000000200)='./file1\x00', r3, &(0x7f0000000140)='./file0/file0\x00') __realpathat(r3, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0) 1.046732424s ago: executing program 3 (id=22): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x68e, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, &(0x7f00000003c0)={0x7, 0x5}, 0x8) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000000)="727f4c98e6e3b6d62e469a3ba2e66dba9106d9b78a10424b95805142", 0x1c, 0x185, &(0x7f0000000280)={0x10, 0x2, 0x1, @local={0xac, 0x14, 0x0}}, 0x10) r2 = openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) lseek(r3, 0xfffffffffffffffd, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) fhstat(0x0, &(0x7f0000001ac0)) getresgid(&(0x7f0000001bc0), &(0x7f0000001c00)=0x0, &(0x7f0000001c40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) fstatat(r2, &(0x7f0000001c80)='./file0\x00', 0x0, 0x8000) freebsd11_stat(0x0, 0x0) getresgid(&(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00)) getgroups(0x3, &(0x7f00000002c0)=[0x0, r4, 0x0]) r5 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x602, 0x0) r7 = freebsd12_shm_open(0x0, 0x200, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x12, r7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ftruncate(r6, 0x80000001003864) write(r6, 0x0, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x54, &(0x7f0000000180)={0x4, {{0x1c, 0x1c, 0x1, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, 0x100}}, {{0x1c, 0x1c, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000}}}, 0x108) 513.012181ms ago: executing program 2 (id=23): r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000080), 0x26) freebsd11_statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) __semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000004c0)=&(0x7f0000000480)={{r1, r2, r3, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xc}, 0x1, 0x4, 0x0, 0x0, 0x1, 0x7ff}) 463.749388ms ago: executing program 2 (id=24): open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) socket$inet6_sctp(0x1c, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x5, 0x84) r0 = socket(0x2, 0x3, 0x43) dup2(r0, r0) kevent(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff5, 0x1, 0xc135b11e8fe222be, 0x6, 0xffffffffffffffff, [0x0, 0x100, 0x4000000000000000, 0xf]}], 0x1, 0x0, 0x13, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000080)=[{0x0, 0xffffffffffffffff, 0xa1, 0x4, 0x9, 0x4, [0x0, 0x0, 0xc00]}], 0x40, 0x0, 0xa, 0x0) kevent(r1, &(0x7f0000000000)=[{0x0, 0xfffffffffffffff9, 0x17, 0x10}], 0x29f, 0x0, 0x8001, 0x0) 435.719502ms ago: executing program 1 (id=25): r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) 229.361727ms ago: executing program 2 (id=26): r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x51, &(0x7f0000000240)={0x1, {{0x1c, 0x1c, 0x3, 0x0, @mcast1}}}, 0x88) kqueue() mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) fork() setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000016c0)=ANY=[], 0x28) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000700000000000019078e0000002e00000020b00907800007e004500000200000000000600007f000001ac1400bb891b00ac1400bb00000000ac1400aaffffffffac1400bbac1400bb838aef64d51300ac1400bb00000000ac1400aae0000002890f00ffffffff00000000e0000002000000"]) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r2 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x7bfffffe, 0x26}, {0x0, 0xcfe}}, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)='wb', 0x2}], 0x1, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x80, 0x106) mmap(&(0x7f00005a4000/0x4000)=nil, 0x4000, 0x7, 0x12, r3, 0x0) getpeername(r0, 0x0, &(0x7f0000000100)) open$dir(0x0, 0x40000400000002c2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, 0x0, 0x100, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x46, &(0x7f0000000000)={@empty, @local={0xac, 0x14, 0x0}, @loopback}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x46, &(0x7f00000001c0)={@multicast2, @empty, @local={0xac, 0x14, 0x0}}, 0xc) rfork(0x0) thr_self(&(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, &(0x7f0000000140)) procctl$PROC_TRACE_CTL(0x0, 0x0, 0x7, &(0x7f0000002440)=0x3) r5 = fork() procctl$PROC_TRACE_CTL(0x0, r5, 0x7, &(0x7f0000000000)=0x3) 217.67593ms ago: executing program 3 (id=27): openat$crypto(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6(0x1c, 0x2, 0x0) r0 = kqueue() fcntl$getown(r0, 0x5) kevent(r0, &(0x7f0000000000)=[{0x3, 0xffffffffffffffff, 0x3, 0x4f, 0x0, 0x0, [0x0, 0xffffffffffffffff, 0x0, 0x404]}], 0x1, 0x0, 0x0, 0x0) __specialfd$eventfd(0x1, &(0x7f00000001c0)={0x0, 0x6}, 0x8) rfork(0x85000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x41, &(0x7f0000000280)=0x28268231, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x10, 0x2, 0x2, @multicast2}, 0x10) r4 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a88f3d4db5"]) setsockopt$sock_int(r4, 0xffff, 0x1001, 0x0, 0x0) kqueue() open(0x0, 0x8000, 0x40) bind$inet6(r4, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x32, &(0x7f0000000240)=ANY=[], 0x8) connect$inet6(r4, 0x0, 0x0) mkdir(0x0, 0x0) setreuid(0xee00, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800400000000000000000009078000000001221"]) r5 = getuid() setreuid(0x0, r5) sysarch$I386_CLEAR_PKRU(0xd, &(0x7f00000023c0)={0x0, 0x0, 0x9}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x53, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) 120.500109ms ago: executing program 1 (id=28): mkdir(&(0x7f0000000000)='./file0\x00', 0x8) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) aio_write(&(0x7f0000000240)={0xffffffffffffffff, 0x80000001, 0x0, 0x0, [0x3, 0x7a], 0x200000000000000, 0x8, 0x9fc6, {0x80000001, 0x8, 0x0}, {0x4, 0xf, @sival_int=0xfffffff9, @ke_flags=0xc083}}) aio_fsync(0x80, &(0x7f0000000100)={0xffffffffffffffff, 0x6, 0x0, 0x0, [0x9, 0x2], 0x9eab, 0x1, 0x0, {0x1b62, 0x8, 0x0}, {0x0, 0x7, @sigval_ptr=0x1, @ke_flags=0x8058}}) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) select(0xb91d903, 0x0, 0xffffffffffffffff, 0x0, 0x0) kqueue() socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$crypto(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) extattr_set_link(&(0x7f0000000040)='./file0\x00', 0x6, &(0x7f0000000080)='\x00', &(0x7f00000000c0)="270521", 0x3) r0 = freebsd12_shm_open(0x0, 0x602, 0x0) setsid() ftruncate(r0, 0x80000001003864) r1 = fork() rtprio(0x1, r1, 0x0) r2 = socket$inet6(0x1c, 0x1, 0x0) setsockopt(r2, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) cpuset_setaffinity(0x1, 0x1, 0x4, 0x8, &(0x7f0000001940)={[0x7]}) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) extattr_list_fd(r2, 0x1, &(0x7f00000012c0)=""/4096, 0x1000) write(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002700)="01010000000000", 0x7, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x3, 0x0, @mcast2, 0x3}, 0x1c) 0s ago: executing program 1 (id=29): r0 = fork() r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x10, 0x2, 0x0}, 0x10) sigqueue(r0, 0xf, @sigval_ptr=0x2) wait4(r0, &(0x7f0000000100), 0x10, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. panic: handle_workitem_remove: file ino 71 negative i_nlink -1 cpuid = 1 time = 1753789728 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056c527d0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056c52930 vpanic() at vpanic+0x257/frame 0xfffffe0056c52af0 panic() at panic+0xb5/frame 0xfffffe0056c52bb0 handle_workitem_remove() at handle_workitem_remove+0xd45/frame 0xfffffe0056c52cf0 process_worklist_item() at process_worklist_item+0x525/frame 0xfffffe0056c52e40 softdep_process_worklist() at softdep_process_worklist+0xfd/frame 0xfffffe0056c52e90 softdep_flush() at softdep_flush+0x1a4/frame 0xfffffe0056c52ef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056c52f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056c52f30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 14 tid 100094 ] Stopped at kdb_enter+0x6e: movq $0,0x25c45c7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff827cb4c0 .str.27 rsp 0xfffffe0056c52910 rbp 0xfffffe0056c52930 rsi 0 rdi 0xffffffff81614a99 printf+0x149 r8 0 r9 0xffffffff r10 0xc84f1085fd97c19c r11 0x3f r12 0xfffffe00540c2000 r13 0xfffffffffffffffd r14 0xffffffff827cb4c0 .str.27 r15 0 rip 0xffffffff815fe5ce kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25c45c7(%rip) db> show proc Process 14 (bufdaemon) at 0xfffffe000780a5c0: state: NORMAL uid: 0 gids: 0 parent: pid 0 at 0xffffffff83b4d060 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b4d060 reapsubtree: 14 sigparent: 20 vmspace: 0xffffffff83b4e040 (map 0xffffffff83b4e040) (map.pmap 0xffffffff83b4e0e0) (pmap 0xffffffff83b4e150) threads: 3 100079 D psleep 0xffffffff83cbfd60 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 Run CPU 1 [/ worker] db> ps pid ppid pgrp uid state wmesg wchan cmd 885 781 423 0 R sh 884 1 883 0 S uwait 0xfffffe00584ec300 syz-executor 882 879 765 0 S uwait 0xfffffe00584eb980 syz-executor 881 766 766 0 R (threaded) syz-executor 100140 RunQ syz-executor 100177 S uwait 0xfffffe006e4aa580 syz-executor 879 765 765 0 R (threaded) syz-executor 100141 RunQ syz-executor 100176 RunQ syz-executor 100179 RunQ syz-executor 100180 RunQ syz-executor 872 1 764 0 S uwait 0xfffffe00584eb580 syz-executor 862 763 763 0 RE syz-executor 858 1 764 0 S uwait 0xfffffe0058259a80 syz-executor 818 0 0 0 DL - 0xffffffff83cb3e00 [soaiod4] 817 0 0 0 DL - 0xffffffff83cb3e00 [soaiod3] 816 0 0 0 DL - 0xffffffff83cb3e00 [soaiod2] 815 0 0 0 DL - 0xffffffff83cb3e00 [soaiod1] 814 0 0 0 DL aiordy 0xfffffe00540f2ae0 [aiod5] 813 0 0 0 DL aiordy 0xfffffe00540f3040 [aiod4] 812 0 0 0 DL aiordy 0xfffffe00540d0560 [aiod3] 811 0 0 0 DL aiordy 0xfffffe00540f35a0 [aiod2] 810 0 0 0 DL aiordy 0xfffffe00540f3b00 [aiod1] 781 770 423 0 S piperd 0xfffffe006b428140 sh 770 423 423 0 S wait 0xfffffe00540d2b00 sh 766 762 766 0 S nanslp 0xffffffff83ba3c41 syz-executor 765 762 765 0 R syz-executor 764 762 764 0 R syz-executor 763 762 763 0 R syz-executor 762 760 760 0 S select 0xfffffe0053ffb540 syz-executor 760 758 760 0 Ss sigsusp 0xfffffe00540d10d0 csh 758 681 758 0 Ss select 0xfffffe0057d65840 sshd 747 1 747 0 Ss+ ttyin 0xfffffe00582904b0 getty 746 1 746 0 Ss+ ttyin 0xfffffe00585cc8b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe005828dcb0 getty 744 1 744 0 Ss+ ttyin 0xfffffe00585cccb0 getty 743 1 743 0 Ss+ ttyin 0xfffffe00585cd0b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe00585cd4b0 getty 741 1 741 0 Ss+ ttyin 0xfffffe00585cd8b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe00585cdcb0 getty 739 1 739 0 Ss+ ttyin 0xfffffe00585ce0b0 getty 737 1 17 0 S+ piperd 0xfffffe006b4309e0 logger 736 735 17 0 S+ nanslp 0xffffffff83ba3c40 sleep 735 1 17 0 S+ wait 0xfffffe00540aa040 sh 685 1 685 0 Ss nanslp 0xffffffff83ba3c41 cron 681 1 681 0 Ss select 0xfffffe00593ed0c0 sshd 494 1 494 0 Ss select 0xfffffe00593ece40 syslogd 423 1 423 0 Ss wait 0xfffffe00540aa5a0 devd 422 1 422 65 Ss select 0xfffffe00593ecdc0 dhclient 337 1 337 0 Ss select 0xfffffe0053ffbb40 dhclient 334 1 334 0 Ss select 0xfffffe00593ed040 dhclient 16 0 0 0 DL syncer 0xffffffff83cc1820 [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a060 [vnlru] 14 0 0 0 RL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cbfd60 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 Run CPU 1 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d0acc0 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83cf0d88 [dom0] 100080 D launds 0xffffffff83cf0d94 [laundry: dom0] 100081 D umarcl 0xffffffff81de0e10 [uma] 7 0 0 0 DL - 0xffffffff8391c5d8 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff843d39e0 [pf purge] 5 0 0 0 DL waiting 0xffffffff846ba700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838e6340 [doneq0] 100046 D - 0xffffffff838e62c0 [async] 100075 D - 0xffffffff838e6140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cec640 [crypto] 100043 D crypto_ 0xfffffe0057d43030 [crypto returns 0] 100044 D crypto_ 0xfffffe0057d43080 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b4c620 [g_event] 100038 D - 0xffffffff83b4c640 [g_up] 100039 D - 0xffffffff83b4c660 [g_down] 2 0 0 0 RL (threaded) [clock] 100031 Run CPU -1 [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809040 [init] 10 0 0 0 DL audit_w 0xffffffff83ced0e0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c3dff0 [swapper] 100005 D - 0xfffffe0007768d00 [softirq_0] 100006 D - 0xfffffe0007768b00 [softirq_1] 100007 D - 0xfffffe0007768900 [if_io_tqg_0] 100008 D - 0xfffffe0007768700 [if_io_tqg_1] 100009 D - 0xfffffe0007768500 [if_config_tqg_0] 100010 D - 0xfffffe00083db100 [kqueue_ctx taskq] 100011 D - 0xfffffe00083db000 [jail_remove taskq] 100012 D - 0xfffffe00083dae00 [bus taskq] 100015 D - 0xfffffe00083da900 [thread taskq] 100017 D - 0xfffffe00083da600 [aiod_kick taskq] 100018 D - 0xfffffe00083da500 [deferred_unmount ta] 100019 D - 0xfffffe00083da400 [inm_free taskq] 100020 D - 0xfffffe00083da300 [in6m_free taskq] 100021 D - 0xfffffe00083da200 [linuxkpi_irq_wq] 100022 D - 0xfffffe00083da100 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00083da100 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00083da100 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00083da100 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00083da000 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00083da000 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00083da000 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00083da000 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00083d9900 [firmware taskq] 100040 D - 0xfffffe0057d47300 [crypto_0] 100041 D - 0xfffffe0057d47300 [crypto_1] 100056 D - 0xfffffe00083dd200 [vtnet0 rxq 0] 100057 D - 0xfffffe0058145500 [vtnet0 txq 0] 100058 D - 0xfffffe0058145400 [vtnet0 rxq 1] 100059 D - 0xfffffe0058145300 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057d67400 [virtio_balloon] 100065 D - 0xffffffff827cfba1 [deadlkres] 100069 D - 0xfffffe0057d46e00 [acpi_task_0] 100070 D - 0xfffffe0057d46e00 [acpi_task_1] 100071 D - 0xfffffe0057d46e00 [acpi_task_2] 100073 D - 0xfffffe00083dca00 [mca taskq] 100074 D - 0xfffffe0057d46b00 [CAM taskq] 100076 D - 0xfffffe0057d47000 [ipsec_offload] db> show all locks Process 879 (syz-executor) thread 0xfffffe0054116780 (100179) shared lockmgr ufs (ufs) r = 0 (0xfffffe006e4cf070) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_cache.c:5238 Process 862 (syz-executor) thread 0xfffffe0054113780 (100119) exclusive rw pmap pv list (pmap pv list) r = 0 (0xfffffe00074cd9c0) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8605 exclusive sleep mutex pmap (pmap) r = 0 (0xfffffe00540b7110) locked @ /syzkaller/managers/main/kernel/sys/amd64/amd64/pmap.c:8515 Process 14 (bufdaemon) thread 0xfffffe00540c2000 (100094) exclusive rw SUrw (SUrw) r = 0 (0xfffffe005828d800) locked @ /syzkaller/managers/main/kernel/sys/ufs/ffs/ffs_softdep.c:10022 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006e482908) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3384 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 376 5079K 486 tcp_hpts 7 4801K 7 devbuf 4187 4323K 4212 sysctloid 34891 2055K 34966 vtbuf 24 1968K 46 kobj 330 1320K 494 newblk 429 1131K 600 vfscache 3 1025K 3 pcb 24 669K 70 inodedep 71 539K 134 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 140 278K 964 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 128 acpica 1674 184K 54426 filedesc 20 153K 125 vmem 5 144K 6 tidhash 3 141K 3 pagedep 24 134K 59 tfo_ccache 1 128K 1 IP reass 1 128K 1 sem 4 106K 4 DEVFS1 106 106K 123 gtaskqueue 18 98K 18 bus 997 82K 5063 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 521 66K 521 ddb_capture 1 64K 1 kdtrace 199 39K 1067 umtx 288 36K 288 hostcache 1 32K 1 shm 1 32K 4 DEVFS3 125 32K 135 msg 4 30K 4 kbdmux 6 28K 6 temp 31 21K 1822 DEVFS_RULE 56 20K 56 ifaddr 66 19K 68 BPF 14 19K 18 ufs_mount 4 17K 5 proc 3 17K 3 LRO 16 17K 16 tty 16 16K 16 routetbl 124 16K 395 ithread 90 15K 90 bus-sc 34 15K 1647 eventhandler 163 14K 163 lltable 43 14K 44 ifnet 7 13K 7 ether_multi 152 13K 162 kenv 95 12K 95 GEOM 49 11K 431 CAM queue 5 11K 1528 rman 82 10K 437 shmfd 4 10K 13 rpc 8 9K 8 in6_multi 65 9K 65 bmsafemap 3 9K 104 plimit 22 9K 317 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 pfs_vncache 1 8K 1 audit_evclass 240 8K 303 taskqueue 69 8K 75 cred 25 7K 193 sglist 6 7K 6 CAM DEV 3 6K 510 dirrem 22 6K 81 pfs_nodes 22 6K 22 kqueue 67 6K 937 ufs_dirhash 24 5K 24 UMA 266 5K 266 pf_ifnet 10 5K 19 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 diradd 32 4K 96 evdev 4 4K 4 pwddesc 61 4K 889 acpisem 28 4K 28 DEVFSP 48 3K 68 terminal 11 3K 11 session 21 3K 32 selfd 41 3K 8133 proc-args 82 3K 1910 indirdep 10 3K 18 acpidev 20 3K 20 uidinfo 4 3K 8 hhook 8 3K 10 clone 9 3K 9 kcovinfo 36 3K 36 local_apic 1 2K 1 io_apic 1 2K 1 mkdir 16 2K 92 ipsec-saq 2 2K 2 ip6ndp 12 2K 14 newdirblk 14 2K 46 Unitno 28 2K 50 sctp_ifa 13 2K 14 CAM XPT 22 2K 543 lockf 15 2K 26 in_multi 6 2K 8 tun 4 2K 4 toponodes 6 2K 6 ipsecpolicy 2 2K 2 msi 9 2K 9 netlink 2 2K 71 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 8 select 8 1K 25 NFSD session 1 1K 1 CAM periph 4 1K 271 ipsec 3 1K 3 sctp_ifn 6 1K 14 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 130 pci_link 10 1K 10 crypto 4 1K 11 CC Mem 5 1K 20 encap_export_host 12 1K 12 osd 10 1K 37 cdev 2 1K 2 lkpikmalloc 8 1K 9 inpcbpolicy 14 1K 200 counter_rate 13 1K 13 cryptodev 6 1K 67 freefile 3 1K 47 chacha20random 1 1K 1 biobuf 1 1K 1 freework 2 1K 86 freeblks 1 1K 58 vnodes 1 1K 2 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 aio 5 1K 5 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 freefrag 1 1K 21 procdesc 1 1K 6 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 3317 filecaps 4 1K 66 sctp_vrf 1 1K 1 ip_msource 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 32 acpiintr 1 1K 1 cpus 2 1K 2 ip6_moptions 1 1K 1 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 tcp_pcm_rack 0 0K 1 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 2 mqdata 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 12 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 5 sctp_atky 0 0K 5 sctp_atcl 0 0K 5 sctp_a_it 0 0K 12 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 filemon 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 56 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 2 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6opt 0 0K 3 ip6_msource 0 0K 0 in6_mfilter 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_moptions 0 0K 1 in_mfilter 0 0K 2 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 19 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 190 namei_tracker 0 0K 1 inotify 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 10 lio 0 0K 1 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 iov 0 0K 13458 ioctlops 0 0K 97 eventfd 0 0K 3 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 288 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 635 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 2 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 175 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 12618 0 254 38494208 0 mbuf 256 8619 1043 15695 0 254 2473472 0 BUF TRIE 152 213 11591 559 0 62 1794208 0 malloc-4096 4096 392 4 1380 0 2 1622016 0 malloc-384 384 4121 49 4464 0 30 1601280 0 malloc-128 128 11495 99 11588 0 126 1484032 0 tcp_log 416 1109 2455 4737 0 254 1482624 0 UMA Slabs 0 112 10909 29 10909 0 126 1225056 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 RADIX NODE 152 6067 636 27958 0 62 1018856 0 vmem btag 56 16163 76 16163 0 254 909384 0 malloc-65536 65536 9 1 12 0 1 655360 0 FFS inode 1168 537 23 585 0 8 654080 0 socket 1024 23 485 1402 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 166 0 0 2 435584 0 malloc-65536 65536 4 2 116 0 1 393216 0 malloc-2048 2048 106 86 636 0 8 393216 0 VM OBJECT 248 1117 131 13937 0 62 309504 0 sctp_ep 1152 0 259 5 0 254 298368 0 VNODE 440 573 93 623 0 30 293040 0 256 Bucket 2048 120 16 988 0 8 278528 0 malloc-64 64 4165 182 5844 0 254 278208 0 THREAD 1860 136 8 180 0 8 267840 0 malloc-16 16 14398 102 14482 0 254 232000 0 malloc-16384 16384 10 4 61 0 1 229376 0 DEVCTL 1024 22 198 147 0 0 225280 0 malloc-256 256 737 133 2025 0 62 222720 0 UMA Zones 768 238 1 238 0 16 183552 0 malloc-32 32 5335 335 5357 0 254 181440 0 malloc-128 128 1215 180 25362 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 8 508 1168 0 254 165120 0 malloc-1024 1024 124 36 866 0 16 163840 0 MAP ENTRY 96 1290 348 43855 0 126 157248 0 FFS2 dinode 256 537 33 585 0 62 145920 0 FPU_save_area 832 138 24 213 0 16 134784 0 S VFS Cache 104 994 293 1082 0 126 133848 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 0 2 66 0 1 131072 0 malloc-32768 32768 3 1 14 0 1 131072 0 malloc-32768 32768 4 0 4 0 1 131072 0 mbuf_packet 256 0 508 139 0 254 130048 0 ksiginfo 112 55 989 75 0 126 116928 0 PROC 1376 61 16 885 0 8 105952 0 malloc-128 128 522 253 3854 0 126 99200 0 filedesc0 1072 61 23 889 0 8 90048 0 UMA Kegs 384 225 8 225 0 30 89472 0 128 Bucket 1024 44 39 244 0 16 84992 0 vnpbuf 2624 0 32 2 0 16 83968 0 malloc-128 128 434 217 702 0 126 83328 0 malloc-64 64 645 426 2341 0 254 68544 0 malloc-64 64 559 512 9697 0 254 68544 0 malloc-128 128 309 218 1126 0 126 67456 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-16384 16384 3 1 193 0 1 65536 0 malloc-4096 4096 13 3 28 0 2 65536 0 malloc-2048 2048 4 28 723 0 8 65536 0 64 Bucket 512 77 51 1723 0 30 65536 0 malloc-256 256 196 59 454 0 62 65280 0 g_bio 408 0 150 5093 0 30 61200 0 malloc-8192 8192 7 0 7 0 1 57344 0 malloc-8192 8192 7 0 8 0 1 57344 0 malloc-128 128 152 251 713 0 126 51584 0 malloc-256 256 103 92 440 0 62 49920 0 32 Bucket 256 62 133 859 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 1 47 12875 0 16 49152 0 malloc-8192 8192 4 2 111 0 1 49152 0 malloc-4096 4096 8 4 53 0 2 49152 0 malloc-384 384 98 22 101 0 30 46080 0 malloc-384 384 76 44 140 0 30 46080 0 syncache 168 0 264 3 0 254 44352 0 malloc-4096 4096 8 2 8 0 2 40960 0 pcpu-8 8 4694 426 4878 0 254 40960 0 udp_inpcb 408 6 84 157 0 30 36720 0 malloc-64 64 66 501 13475 0 254 36288 0 malloc-64 64 160 407 197 0 254 36288 0 malloc-64 64 15 552 75 0 254 36288 0 malloc-64 64 14 553 32 0 254 36288 0 malloc-128 128 72 207 240 0 126 35712 0 routing nhops 256 26 109 33 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-384 384 52 38 53 0 30 34560 0 malloc-256 256 0 135 389 0 62 34560 0 malloc-256 256 18 117 29 0 62 34560 0 malloc-256 256 16 119 234 0 62 34560 0 malloc-256 256 26 109 29 0 62 34560 0 malloc-256 256 22 113 332 0 62 34560 0 malloc-16384 16384 2 0 3 0 1 32768 0 malloc-8192 8192 3 1 5 0 1 32768 0 malloc-4096 4096 5 3 563 0 2 32768 0 malloc-2048 2048 2 14 2 0 8 32768 0 malloc-2048 2048 5 11 72 0 8 32768 0 malloc-2048 2048 9 7 9 0 8 32768 0 malloc-2048 2048 12 4 34 0 8 32768 0 malloc-1024 1024 28 4 32 0 16 32768 0 malloc-1024 1024 10 22 24 0 16 32768 0 malloc-1024 1024 2 30 2 0 16 32768 0 malloc-1024 1024 8 24 12 0 16 32768 0 malloc-1024 1024 0 32 976 0 16 32768 0 malloc-512 512 4 60 161 0 30 32768 0 malloc-512 512 2 62 22 0 30 32768 0 malloc-512 512 2 62 8 0 30 32768 0 malloc-512 512 3 61 17 0 30 32768 0 malloc-512 512 10 54 29 0 30 32768 0 pcpu-64 64 498 14 498 0 254 32768 0 ttyinq 160 135 65 300 0 62 32000 0 PGRP 120 25 239 36 0 126 31680 0 clpbuf 2624 0 12 25 0 4 31488 0 tcp_inpcb 1304 5 19 20 0 8 31296 0 VMSPACE 584 37 12 862 0 16 28616 0 sctp_laddr 48 0 588 12 0 254 28224 0 malloc-32 32 276 606 3103 0 254 28224 0 16 Bucket 144 59 137 270 0 62 28224 0 4 Bucket 48 6 582 8 0 254 28224 0 AIO 208 0 133 6 0 62 27664 0 da_ccb 544 0 49 1375 0 16 26656 0 TURNSTILE 136 145 44 145 0 62 25704 0 cpuset 200 7 121 8 0 62 25600 0 malloc-4096 4096 3 3 195 0 2 24576 0 malloc-4096 4096 3 3 7 0 2 24576 0 pipe 736 21 12 321 0 16 24288 0 ertt_txseginfo 40 0 606 290 0 254 24240 0 PWD 40 19 587 124 0 254 24240 0 rtentry 168 29 115 33 0 62 24192 0 Files 80 168 132 7085 0 126 24000 0 8 Bucket 80 55 245 330 0 126 24000 0 malloc-384 384 19 41 21 0 30 23040 0 malloc-384 384 36 24 332 0 30 23040 0 malloc-384 384 2 58 31 0 30 23040 0 ripcb 376 3 57 17 0 30 22560 0 Mountpoints 2816 2 6 2 0 4 22528 0 SLEEPQUEUE 88 145 111 145 0 126 22528 0 hostcache 64 2 313 2 0 254 20160 0 ertt 72 5 275 20 0 126 20160 0 malloc-64 64 3 312 3 0 254 20160 0 malloc-32 32 53 577 238 0 254 20160 0 malloc-32 32 90 540 158 0 254 20160 0 malloc-32 32 144 486 343 0 254 20160 0 malloc-32 32 26 604 1074 0 254 20160 0 2 Bucket 32 48 582 334 0 254 20160 0 KNOTE 160 1 124 28 0 62 20000 0 tcp_rack_map 128 0 155 3 0 126 19840 0 malloc-128 128 0 155 2 0 126 19840 0 AIOCB 552 0 35 8 0 16 19320 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 1 1 2 0 1 16384 0 malloc-8192 8192 1 1 20 0 1 16384 0 malloc-4096 4096 0 4 5 0 2 16384 0 malloc-2048 2048 4 4 4 0 8 16384 0 malloc-2048 2048 1 7 51 0 8 16384 0 malloc-512 512 1 31 1 0 30 16384 0 malloc-512 512 1 31 1 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 malloc-16 16 480 520 3386 0 254 16000 0 kenv 258 17 43 1065 0 30 15480 0 tcp_rack_pcb 1088 0 14 1 0 8 15232 0 mqnode 416 3 33 3 0 30 14976 0 udplite_inpcb 408 0 36 6 0 30 14688 0 SMR SHARED 24 8 503 8 0 254 12264 0 malloc-32 32 144 234 1389 0 254 12096 0 malloc-32 32 7 371 7 0 254 12096 0 malloc-16 16 38 712 1495 0 254 12000 0 malloc-16 16 23 727 206 0 254 12000 0 malloc-16 16 36 714 24841 0 254 12000 0 malloc-16 16 10 740 10 0 254 12000 0 malloc-16 16 33 717 95 0 254 12000 0 cryptop 280 0 42 3 0 30 11760 0 malloc-384 384 26 4 37 0 30 11520 0 AIOLIO 272 0 42 1 0 30 11424 0 pcpu-16 16 8 504 8 0 254 8192 0 vtnet_tx_hdr 24 0 334 1592 0 254 8016 0 malloc-16 16 17 483 20 0 254 8000 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_bbr_pcb 896 0 0 0 0 16 0 0 tcp_bbr_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 sctp_raddr 736 0 0 0 0 254 0 0 sctp_asoc 2256 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 itimer 352 0 0 0 0 30 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 L VFS Cache 320 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 rl_entry 48 0 0 0 0 254 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-1024 1024 0 0 0 0 16 0 0 malloc-1024 1024 0 0 0 0 16 0 0 malloc-512 512 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl