last executing test programs: 14.783507484s ago: executing program 2 (id=116): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(0x0, 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r1, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) sendfile(r2, r5, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r6 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) ftruncate(r6, 0x107d2) 14.575171167s ago: executing program 1 (id=117): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, 0x0) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r1, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) sendfile(r2, r5, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r6 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) ftruncate(r6, 0x107d2) 13.145652188s ago: executing program 0 (id=119): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(0x0, 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r1, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) sendfile(r2, r5, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r6 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) ftruncate(r6, 0x107d2) 12.824298701s ago: executing program 3 (id=120): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x11, r0) ioctl$KDGKBTYPE(r1, 0x40044b40, 0x9) ioctl$SMB_READB(r1, 0xc020697a, &(0x7f00000000c0)={0xff, 0xfd, 0x0, @word=0x2, @buf='(\x00', 0x0, 0x0, 0x0, 0x0}) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) r2 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x211, &(0x7f0000000340)={@local, @empty, [{[{0x88a8, 0x3, 0x0, 0x2}], {0x8100, 0x5, 0x1}}], {@ipv6={0x86dd, {0xd, 0x6, "ecf072", 0x1d3, 0xf, 0x0, @loopback, @remote={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x2b, 0x2, 0x0, 0x9, 0x0, [@empty]}, @hopopts={0x4f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @ra={0x5, 0x2, 0x8}]}, @routing={0x87, 0x2, 0x1, 0x0, 0x0, [@loopback]}, @routing={0x5c, 0xa, 0x0, 0x7f, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}]}, @fragment={0x6, 0x0, 0x9, 0x0, 0x0, 0x9, 0x66}, @dstopts={0x6c, 0x13, '\x00', [@pad1, @generic={0x2, 0x36, "5da55e87622c723757b5b32f3ca6607dc65822a72b01fc9298a7898b630ca44c3c7022e22f6dedc601fe0d95bd9baf956b175f1107fd"}, @generic={0xc, 0x5e, "4208ea20659363116743d6912a4f1356497e72f13da6f941115e89f3d3c113f5cc13e54138f69aedc16f083aca2949acc79ba220949f5ee0f06f33019da84f0097eb96cf902e0d1b3bfa36de0ccb09726f3c42130621a3665d679e72fca1"}]}], @udp={{0x2, 0x2, 0x8}, {"de07c0795340895d9621fa61d2e3be19704c3fcaf2ab80139a61688a5f1d0379d20cd486ffa9af47a4f394ce849dcd7e260091c0d3cc82b4a8aca021d53418f880f9aa8b2e7e3ec94c6a8fb67457841203fe55a305879614c1e1b5937d088aabb8bf1883f979c5710e2ca60c70ac7b7d3d1d346cf98d5c663d9c8379a2872d3ab47341"}}}}}}}) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x1, 0x0, @loopback, 0xffffffff}, {0x1c, 0x1c, 0x0, 0x0, @rand_addr="60c3e9befba730b32a7dd7e184ab01c7"}, 0x0, [0x0, 0xfffffffd, 0x6, 0x800, 0x8000001, 0x0, 0x0, 0x2ffff]}, 0x5c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="000000000104000000000000731600"}, 0x1c) r4 = socket(0x1c, 0x1, 0x0) writev(r4, 0x0, 0x0) r5 = vfork() sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x9, 0x9cb8, 0x6}) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r5}) wait4(r5, 0x0, 0x2, 0x0) fhstatfs(&(0x7f0000000040)={{[0x5c8951ac, 0x3bea9983]}, {0x0, 0x0, "369f0000000000000000002000"}}, 0x0) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) sendto(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) r6 = socket(0x1c, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x80) write(r3, &(0x7f0000000640)="160ead004cf8dc7074d945160ae3bfdab274fc13bb8fc2ead61c2981450731d09fca69a0cc8220b3454b17a19c483adae223266d842d113d09ca8e25c40d99edba683065024275f6d1b8aeaefafed35b838f8f40121f59830c6ed9990000000000000000000000000000009b6862dd2ff554e3593e88eed80a7929cce4d56e3b9760451229509535c67258ca5e79e4f1756ecd97c11e60617d3e8f5a4b6d2d7906bfd9600ceb8f29636c174a4012475bb242d0f3b5b3f2de70d3dee835f2a34863b1d10139d5033aa0c04299ae44cd7da186c1f5a88a2d002571c92e6347cfad47b6f773c2cd81af3bd8e85bc216266fff0c949614b23ecbd166144929a7fbbe6b27779e81312ac7ad1d3fe41be9b3cacbfe249faa82e1ad6d2e9daee9ac3976a25dc10f2e4646e572c70429a6f144e769918ddcd20d19cf345c47", 0x13b) ioctl$KDGETMODE(r6, 0x40046676, 0x22e00000) 12.245456474s ago: executing program 1 (id=121): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f490000000000"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r1, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) sendfile(r2, r5, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r6 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) ftruncate(r6, 0x107d2) 12.209123272s ago: executing program 2 (id=122): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x11, r0) ioctl$KDGKBTYPE(r1, 0x40044b40, 0x9) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) r2 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x211, &(0x7f0000000340)={@local, @empty, [{[{0x88a8, 0x3, 0x0, 0x2}], {0x8100, 0x5, 0x1}}], {@ipv6={0x86dd, {0xd, 0x6, "ecf072", 0x1d3, 0xf, 0x0, @loopback, @remote={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x2b, 0x2, 0x0, 0x9, 0x0, [@empty]}, @hopopts={0x4f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @ra={0x5, 0x2, 0x8}]}, @routing={0x87, 0x2, 0x1, 0x0, 0x0, [@loopback]}, @routing={0x5c, 0xa, 0x0, 0x7f, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}]}, @fragment={0x6, 0x0, 0x9, 0x0, 0x0, 0x9, 0x66}, @dstopts={0x6c, 0x13, '\x00', [@pad1, @generic={0x2, 0x36, "5da55e87622c723757b5b32f3ca6607dc65822a72b01fc9298a7898b630ca44c3c7022e22f6dedc601fe0d95bd9baf956b175f1107fd"}, @generic={0xc, 0x5e, "4208ea20659363116743d6912a4f1356497e72f13da6f941115e89f3d3c113f5cc13e54138f69aedc16f083aca2949acc79ba220949f5ee0f06f33019da84f0097eb96cf902e0d1b3bfa36de0ccb09726f3c42130621a3665d679e72fca1"}]}], @udp={{0x2, 0x2, 0x8}, {"de07c0795340895d9621fa61d2e3be19704c3fcaf2ab80139a61688a5f1d0379d20cd486ffa9af47a4f394ce849dcd7e260091c0d3cc82b4a8aca021d53418f880f9aa8b2e7e3ec94c6a8fb67457841203fe55a305879614c1e1b5937d088aabb8bf1883f979c5710e2ca60c70ac7b7d3d1d346cf98d5c663d9c8379a2872d3ab47341"}}}}}}}) r3 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x1c, 0x1, 0x0, @loopback, 0xffffffff}, {0x1c, 0x1c, 0x0, 0x0, @rand_addr="60c3e9befba730b32a7dd7e184ab01c7"}, 0x0, [0x0, 0xfffffffd, 0x6, 0x800, 0x8000001, 0x0, 0x0, 0x2ffff]}, 0x5c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="000000000104000000000000731600"}, 0x1c) r4 = socket(0x1c, 0x1, 0x0) writev(r4, 0x0, 0x0) r5 = vfork() sysarch$I386_SET_IOPERM(0x4, &(0x7f0000000040)={0x9, 0x9cb8, 0x6}) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x9, @sigval_int=0x8, @tid=r5}) wait4(r5, 0x0, 0x2, 0x0) fhstatfs(&(0x7f0000000040)={{[0x5c8951ac, 0x3bea9983]}, {0x0, 0x0, "369f0000000000000000002000"}}, 0x0) ioctl$KDGETMODE(r4, 0x40046676, 0x22e00000) sendto(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) r6 = socket(0x1c, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x80) write(r3, &(0x7f0000000640)="160ead004cf8dc7074d945160ae3bfdab274fc13bb8fc2ead61c2981450731d09fca69a0cc8220b3454b17a19c483adae223266d842d113d09ca8e25c40d99edba683065024275f6d1b8aeaefafed35b838f8f40121f59830c6ed9990000000000000000000000000000009b6862dd2ff554e3593e88eed80a7929cce4d56e3b9760451229509535c67258ca5e79e4f1756ecd97c11e60617d3e8f5a4b6d2d7906bfd9600ceb8f29636c174a4012475bb242d0f3b5b3f2de70d3dee835f2a34863b1d10139d5033aa0c04299ae44cd7da186c1f5a88a2d002571c92e6347cfad47b6f773c2cd81af3bd8e85bc216266fff0c949614b23ecbd166144929a7fbbe6b27779e81312ac7ad1d3fe41be9b3cacbfe249faa82e1ad6d2e9daee9ac3976a25dc10f2e4646e572c70429a6f144e769918ddcd20d19cf345c47", 0x13b) ioctl$KDGETMODE(r6, 0x40046676, 0x22e00000) 11.919874412s ago: executing program 3 (id=123): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r1, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(r2, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) ftruncate(0xffffffffffffffff, 0x107d2) 11.364685984s ago: executing program 0 (id=124): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x2, 0x0}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x89, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x0, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) cpuset_getid(0x1, 0x9, 0x0, 0x0) socket(0x17, 0x3, 0x2) symlinkat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file3\x00') r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(0x0, r1, &(0x7f0000000c80)='./file3\x00') r2 = socket(0x1c, 0x1, 0x0) r3 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x2, 0x0, @local, 0x1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x26, 0x0, 0xfffffe5d) getegid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f00000001c0)=0xa, 0x4) aio_return(0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaf788a33fb3f386dd60c3200000282b00feffffff000000000000000000000002ff020000"]) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x80080) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) 11.204794018s ago: executing program 2 (id=125): aio_waitcomplete(0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) connectat$unix(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000) rmdir(0x0) cpuset(0x0) rfork(0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x104}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/64, 0x40, 0x4000}, 0x81) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 10.480480717s ago: executing program 3 (id=126): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r1, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) sendfile(r2, r5, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r6 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) ftruncate(r6, 0x107d2) 10.41462085s ago: executing program 0 (id=127): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r1, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) sendfile(r2, r5, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r6 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) ftruncate(r6, 0x107d2) 10.32536318s ago: executing program 1 (id=128): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) ftruncate(r4, 0x107d2) 10.319776958s ago: executing program 2 (id=129): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, 0x0) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r1, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) sendfile(r2, r5, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r6 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) ftruncate(r6, 0x107d2) 7.451185511s ago: executing program 3 (id=130): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file1\x00', 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setresuid(0x0, 0xee01, 0x0) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) socket$inet6(0x1c, 0x3, 0x7) 6.885319456s ago: executing program 0 (id=131): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setresuid(0x0, 0xee01, 0x0) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) socket$inet6(0x1c, 0x3, 0x7) 6.753429996s ago: executing program 1 (id=132): open(&(0x7f0000000000)='./file0\x00', 0xf5fbbcdef939e6ea, 0x0) open(&(0x7f0000000080)='./file0\x00', 0xf5fbbcdef939e6ea, 0x0) r0 = socket(0x1c, 0x1, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x101) r1 = socket(0x1c, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x6, @empty, 0xfffffffc}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x10145}, 0x0) aio_mlock(&(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x0, 0x0, [0x2], 0x0, 0x2, 0xffffffff, {0x0, 0xfc, 0x0}, {0x0, 0x12, @sigval_ptr=0x6d0, @thr={&(0x7f0000000180)="c4c2290d51af660f3838392615750000003ef20f2da91244d44ec4e14d5f6ea1c4c1f81071060f01dd0f0f42880cc4e17a2c9205800000650f000b", &(0x7f00000001c0)="26d014dfa3601c90be9639e35701292efc091deb72"}}}) r2 = socket$inet6(0x1c, 0x2, 0x0) sendmsg$inet6_sctp(r2, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x20105) ioctl$KDGETMODE(r1, 0x40046676, 0x22e00000) syz_emit_ethernet(0x86, &(0x7f0000000280)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x50, 0x3a, 0xff, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@hopopts={0x4c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x8}, @ra, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x365}]}], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @empty}}}}}}) r3 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x1aa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="ffffffffff"]) eaccess(&(0x7f0000000040)='./file/file0/../\x00', 0x0) ioctl$EFIIOC_VAR_NEXT(0xffffffffffffffff, 0xc0244505, 0x0) r4 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) setsockopt$sock_splice(r2, 0xffff, 0x1023, &(0x7f0000000240)={r0, 0x40, {0x4}}, 0x14) ioctl$CIOCGSESSION2(r4, 0xc030636a, &(0x7f00000000c0)={0x10, 0x14, 0x0, 0x0, 0x1, &(0x7f0000000040)="fb", 0x0, 0x4d46b770, [0x0, 0x3, 0x3ff]}) ioctl$KDGETMODE(r3, 0x40046676, 0x22e00000) aio_write(0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x6, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x149}, 0x0) socket(0x1b, 0x3, 0x0) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 5.80146558s ago: executing program 1 (id=133): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open$dir(&(0x7f0000000100)='./file0\x00', 0x202, 0xa3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000"]) aio_waitcomplete(0x0, 0x0) getsockopt$inet6_sctp_SCTP_GET_PEER_ADDRESSES(0xffffffffffffffff, 0x84, 0x8003, 0x0, 0x0) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setresuid(0x0, 0xee01, 0x0) execve(0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) socket$inet6(0x1c, 0x3, 0x7) 5.585509405s ago: executing program 2 (id=134): socket(0x1c, 0x1, 0x0) pipe2(0x0, 0x100004) socket$inet_udplite(0x2, 0x2, 0x88) aio_waitcomplete(0x0, 0x0) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0xc, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x0, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) r2 = socket(0x1c, 0x1, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCDETACH(r3, 0xc1c06d01, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd16, 0x2, 0x0, 0x0, [0xfff, 0x0, 0x40, 0x2, 0x0, 0x80000, 0x3, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x20000, 0x7, 0x2, 0x8, 0x10000, 0x80000001, 0x9000, 0x0, 0x1, 0x1a40, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x9462, 0x10, 0x7, 0x20006, 0x1000d826, 0x0, 0x0, 0xffffffff, 0x8, 0x3, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x4, 0x1006, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x81, 0x400000, 0x2000000, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffe, 0x0, 0x9, 0x1, 0x0, 0x7, 0x20000, 0x7, 0xfffffffe, 0xfffffffe, 0x8]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bindat$unix(0xffffffffffffff9c, r4, &(0x7f0000000240)=@file={0xa, 0x1, './file0\x00'}, 0xa) r5 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r5, 0xc1b46d00, &(0x7f00000006c0)={0x0, 0x0, 0x2, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0xf, 0x1ffffff, 0x80000, 0x349d, 0x0, [0x10001, 0x8, 0x0, 0x0, 0x12, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x800000, 0x0, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x2000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8000, 0x2, 0x2, 0xfffffffc, 0xfe, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x368, 0xe, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x9c3, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2]}) clock_nanosleep(0x7, 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0) r6 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_int(r6, 0x29, 0x28, &(0x7f00000001c0)=0xa, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaf788a33fb3f386dd60c3200000282b00feffffff000000000000000000000002ff02000000000000000000"]) msgctl$IPC_RMID(0x0, 0x0) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) r7 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB]) ioctl$KDGETMODE(r7, 0x40046676, 0x22e00000) socket(0x1c, 0x1, 0x0) 1.729882172s ago: executing program 2 (id=135): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r1, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) sendfile(r2, r5, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(0x0, 0x4677) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) ftruncate(0xffffffffffffffff, 0x107d2) 1.467636075s ago: executing program 3 (id=136): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x2, 0x0}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x89, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x0, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) cpuset_getid(0x1, 0x9, 0x0, 0x0) socket(0x17, 0x3, 0x2) symlinkat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file3\x00') r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(0x0, r1, &(0x7f0000000c80)='./file3\x00') r2 = socket(0x1c, 0x1, 0x0) r3 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x2, 0x0, @local, 0x1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x26, 0x0, 0xfffffe5d) getegid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f00000001c0)=0xa, 0x4) aio_return(0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaf788a33fb3f386dd60c3200000282b00feffffff000000000000000000000002ff020000"]) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x80080) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) 1.378875838s ago: executing program 0 (id=137): aio_waitcomplete(0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) connectat$unix(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0x1c, 0x2, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0x22e00000) rmdir(0x0) cpuset(0x0) rfork(0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x104}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/64, 0x40, 0x4000}, 0x81) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 480.758917ms ago: executing program 1 (id=138): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r1, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) sendfile(r2, r5, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r6 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) ftruncate(r6, 0x107d2) 477.231742ms ago: executing program 0 (id=139): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(0x0, 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() syz_emit_ethernet(0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800660000fe0aad1f4900000000000000000000aaff0200000000000000000000000000012902000000000000bc"]) aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) freebsd10_pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) cap_rights_limit(r1, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) sendfile(r2, r5, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r6 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) ftruncate(r6, 0x107d2) 0s ago: executing program 3 (id=140): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x3) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) minherit(&(0x7f0000ff9000/0x1000)=nil, 0x820cf7000, 0x1) fork() aio_waitcomplete(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000ec0)) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x400000000000001]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) sendfile(r0, r3, 0x1, 0x400000000000, 0x0, 0x0, 0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x4677) truncate(&(0x7f00000003c0)='./file0\x00', 0x734) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/.%#\x00'], 0x0) getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) socket$inet6(0x1c, 0x0, 0xc) r4 = open(&(0x7f0000000300)='./file0\x00', 0x615, 0xc0) ftruncate(r4, 0x107d2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. Stopping cron. Stopping sshd. panic: failed to reclaim memory cpuid = 1 time = 1763389994 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056de1470 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056de15d0 vpanic() at vpanic+0x257/frame 0xfffffe0056de1790 panic() at panic+0xb5/frame 0xfffffe0056de1860 vm_pageout_oom() at vm_pageout_oom+0xce4/frame 0xfffffe0056de18f0 vm_pageout_worker() at vm_pageout_worker+0xf9b/frame 0xfffffe0056de1ea0 vm_pageout() at vm_pageout+0x2ce/frame 0xfffffe0056de1ef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056de1f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056de1f30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 8 tid 100077 ] Stopped at kdb_enter+0x6e: movq $0,0x25887b7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff82832120 .str.27 rsp 0xfffffe0056de15b0 rbp 0xfffffe0056de15d0 rsi 0 rdi 0xffffffff8165f3f9 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x6 r12 0xfffffe0058607780 r13 0xfffffffffffffffd r14 0xffffffff82832120 .str.27 r15 0 rip 0xffffffff816487de kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25887b7(%rip) db> show proc Process 8 (pagedaemon) at 0xfffffe0058602558: state: NORMAL uid: 0 gid: 0 supp gids: 0 parent: pid 0 at 0xffffffff83b5b020 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b5b020 reapsubtree: 8 sigparent: 20 vmspace: 0xffffffff83b5c000 (map 0xffffffff83b5c000) (map.pmap 0xffffffff83b5c0a0) (pmap 0xffffffff83b5c110) threads: 3 100077 Run CPU 1 [dom0] 100080 D laundp 0xffffffff82836800 [laundry: dom0] 100081 D umarcls 0xffffffff82836801 [uma] db> ps pid ppid pgrp uid state wmesg wchan cmd 1241 1239 1127 0 S+ piperd 0xfffffe0059904140 sh 1240 1239 1127 0 D+ pfault 0xffffffff83003480 ps 1239 1238 1127 0 S+ wait 0xfffffe0058605018 sh 1238 1127 1127 0 S+ piperd 0xfffffe0059903e60 sh 1227 766 766 0 D (threaded) syz-executor 100107 D vm map 0xfffffe00586b34f0 syz-executor 100581 S select 0xfffffe00077881c0 syz-executor 100582 D vmwait 0xffffffff83003480 syz-executor 1221 763 763 0 D (threaded) syz-executor 100317 D mbusy 0xfffffe00078102f8 syz-executor 100577 S select 0xfffffe00077870c0 syz-executor 100579 D pfault 0xffffffff83003480 syz-executor 100580 S uwait 0xfffffe0077aaa080 syz-executor 1219 764 764 0 D (threaded) syz-executor 100457 D mbusy 0xfffffe005879e788 syz-executor 100576 S select 0xfffffe0007787040 syz-executor 100578 D pfault 0xffffffff83003480 syz-executor 1209 1 764 0 S uwait 0xfffffe005830bd00 syz-executor 1208 765 765 0 DL (threaded) syz-executor 100105 D mbusy 0xfffffe005876b788 syz-executor 100570 S select 0xfffffe00077880c0 syz-executor 100575 D vmwait 0xffffffff83003480 syz-executor 1163 1 766 0 S uwait 0xfffffe0077aaa380 syz-executor 1160 1 763 0 S uwait 0xfffffe0077a26380 syz-executor 1144 1 764 0 S uwait 0xfffffe0058309300 syz-executor 1134 1 765 0 S uwait 0xfffffe0077a26800 syz-executor 1132 1130 1127 0 S+ nanslp 0xffffffff83bb2000 sleep 1130 1127 1127 0 S+ wait 0xfffffe005869d000 sh 1127 1 1127 0 Ss+ wait 0xfffffe00586daab8 sh 1126 1 766 0 S uwait 0xfffffe005830b600 syz-executor 1125 1 763 0 S uwait 0xfffffe0077a26a00 syz-executor 1115 1 766 0 S uwait 0xfffffe0077a26c00 syz-executor 1113 1 764 0 S uwait 0xfffffe0077a26280 syz-executor 1107 1 763 0 S uwait 0xfffffe00084f7200 syz-executor 1103 1 1099 0 S uwait 0xfffffe0077a25f00 syz-executor 1102 1 764 0 S uwait 0xfffffe0077aaa280 syz-executor 1101 1 1099 0 S uwait 0xfffffe00084f7880 syz-executor 1100 1 765 0 S uwait 0xfffffe0077aaa180 syz-executor 1098 1 766 0 S uwait 0xfffffe0077a26700 syz-executor 1095 1 1090 0 S uwait 0xfffffe0077a26580 syz-executor 1094 1 1090 0 S uwait 0xfffffe0077a26480 syz-executor 1093 1 763 0 S uwait 0xfffffe0058309900 syz-executor 1088 1 764 0 S uwait 0xfffffe0077a26080 syz-executor 1085 1 765 0 S uwait 0xfffffe00084f7600 syz-executor 1081 1 766 0 S uwait 0xfffffe0077aa9c00 syz-executor 1080 1 765 0 S uwait 0xfffffe0077a27000 syz-executor 1079 1 763 0 S uwait 0xfffffe005858fe00 syz-executor 1077 1 764 0 S uwait 0xfffffe005858eb80 syz-executor 1073 1 766 0 S uwait 0xfffffe0058309200 syz-executor 1071 1 763 0 S uwait 0xfffffe005830c280 syz-executor 1069 1 764 0 S uwait 0xfffffe005830c780 syz-executor 1065 1 766 0 S uwait 0xfffffe0058590800 syz-executor 1063 1 763 0 S uwait 0xfffffe0077a26900 syz-executor 1061 1 765 0 S uwait 0xfffffe00084f7e80 syz-executor 1059 1 766 0 S uwait 0xfffffe005858e900 syz-executor 1058 1 764 0 S uwait 0xfffffe00084f7100 syz-executor 1048 1 766 0 S uwait 0xfffffe00084f7b00 syz-executor 1047 1 763 0 S uwait 0xfffffe00084f7b80 syz-executor 1044 1 765 0 S uwait 0xfffffe005830c380 syz-executor 1038 1 766 0 S uwait 0xfffffe00084f7300 syz-executor 1037 1 763 0 S uwait 0xfffffe0077a27100 syz-executor 1035 1 765 0 S uwait 0xfffffe0077a26e80 syz-executor 1030 1 766 0 S uwait 0xfffffe005858e000 syz-executor 1025 1 763 0 S uwait 0xfffffe00084f7c80 syz-executor 1017 1 764 0 S uwait 0xfffffe005858e380 syz-executor 1016 1 766 0 S uwait 0xfffffe0058309000 syz-executor 1015 1 763 0 S uwait 0xfffffe0058590980 syz-executor 1007 1 766 0 S uwait 0xfffffe0077a26d80 syz-executor 1000 1 763 0 S uwait 0xfffffe00084f7d80 syz-executor 995 1 766 0 S uwait 0xfffffe005858e100 syz-executor 994 1 764 0 S uwait 0xfffffe005858eb00 syz-executor 993 1 763 0 S uwait 0xfffffe005830c480 syz-executor 990 1 765 0 S uwait 0xfffffe005830ca80 syz-executor 986 1 766 0 S uwait 0xfffffe005830ce80 syz-executor 984 1 763 0 S uwait 0xfffffe005830c980 syz-executor 980 1 764 0 S uwait 0xfffffe005858fd00 syz-executor 978 971 978 0 Ss select 0xfffffe0007787840 dhclient 974 1 974 0 Ss select 0xfffffe0007787740 dhclient 971 962 423 65 S select 0xfffffe00077876c0 dhclient 964 1 765 0 S uwait 0xfffffe005830cc80 syz-executor 962 423 423 0 S wait 0xfffffe00586dc018 sh 955 1 763 0 S uwait 0xfffffe005830cd80 syz-executor 948 1 764 0 S uwait 0xfffffe005858e200 syz-executor 926 1 764 0 S uwait 0xfffffe005830c580 syz-executor 921 1 763 0 S uwait 0xfffffe005858f500 syz-executor 920 1 766 0 S uwait 0xfffffe005830a680 syz-executor 918 1 765 0 S uwait 0xfffffe005830a100 syz-executor 915 1 764 0 S uwait 0xfffffe005830a580 syz-executor 910 1 904 0 S uwait 0xfffffe0058309c80 syz-executor 908 1 904 0 S uwait 0xfffffe005858f300 syz-executor 907 1 766 0 S uwait 0xfffffe005830a000 syz-executor 890 1 763 0 S uwait 0xfffffe005830a200 syz-executor 878 1 764 0 S uwait 0xfffffe0058309b00 syz-executor 876 1 765 0 S uwait 0xfffffe005858ed00 syz-executor 873 1 766 0 S uwait 0xfffffe005830cb80 syz-executor 848 1 763 0 S uwait 0xfffffe005858ea00 syz-executor 847 1 765 0 S uwait 0xfffffe005858e480 syz-executor 840 1 764 0 S uwait 0xfffffe005858f180 syz-executor 826 1 804 0 S uwait 0xfffffe005858e780 syz-executor 821 0 0 0 DL (threaded) [so_splice] 100133 D - 0xfffffe0007787780 [thr_0] 100134 D - 0xfffffe00077877c0 [thr_1] 818 1 804 0 S uwait 0xfffffe0058309580 syz-executor 814 0 0 0 DL aiordy 0xfffffe00586f7ac0 [aiod4] 813 0 0 0 DL aiordy 0xfffffe005870aac0 [aiod3] 812 0 0 0 DL aiordy 0xfffffe00586db568 [aiod2] 811 0 0 0 DL aiordy 0xfffffe00586dbac0 [aiod1] 766 762 766 0 S wait 0xfffffe00586f5000 syz-executor 765 762 765 0 S wait 0xfffffe00586f5558 syz-executor 764 762 764 0 S wait 0xfffffe00586da560 syz-executor 763 762 763 0 S wait 0xfffffe0058604568 syz-executor 762 760 760 0 S select 0xfffffe00077879c0 syz-executor 760 758 760 0 Ss sigsusp 0xfffffe00586da0b8 csh 758 1 758 0 Ss select 0xfffffe0007787ac0 sshd 494 1 494 0 Ss select 0xfffffe0007787cc0 syslogd 423 1 423 0 Ss wait 0xfffffe00586a0018 devd 422 1 422 65 Ss select 0xfffffe0007787e40 dhclient 337 1 337 0 Ss select 0xfffffe0007787d40 dhclient 334 1 334 0 Ss select 0xfffffe00542370c0 dhclient 16 0 0 0 DL syncer 0xffffffff83cdfc20 [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cde160 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100092 D sdflush 0xfffffe005808e4e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d1f040 [vmdaemon] 8 0 0 0 RL (threaded) [pagedaemon] 100077 Run CPU 1 [dom0] 100080 D laundp 0xffffffff82836800 [laundry: dom0] 100081 D umarcls 0xffffffff82836801 [uma] 7 0 0 0 DL - 0xffffffff8392a5b0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff843f0f60 [pf purge] 5 0 0 0 DL waiting 0xffffffff84914700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838f4340 [doneq0] 100046 D - 0xffffffff838f42c0 [async] 100075 D - 0xffffffff838f4140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83d009e0 [crypto] 100043 D crypto_ 0xfffffe0007b17030 [crypto returns 0] 100044 D crypto_ 0xfffffe0007b17080 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b5a5e0 [g_event] 100038 D - 0xffffffff83b5a600 [g_up] 100039 D - 0xffffffff83b5a620 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 Run CPU 0 [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83d01480 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c55ff0 [swapper] 100005 D - 0xfffffe00077f7a00 [softirq_0] 100006 D - 0xfffffe00077f7800 [softirq_1] 100007 D - 0xfffffe00077f7600 [if_io_tqg_0] 100008 D - 0xfffffe00077f7400 [if_io_tqg_1] 100009 D - 0xfffffe00077f7200 [if_config_tqg_0] 100010 D - 0xfffffe00077f7000 [kqueue_ctx taskq] 100011 D - 0xfffffe00077f6d00 [jail_remove taskq] 100012 D - 0xfffffe00077f6b00 [bus taskq] 100015 D - 0xfffffe00077f6500 [thread taskq] 100017 D - 0xfffffe00077f6100 [aiod_kick taskq] 100018 D - 0xfffffe00077f5e00 [deferred_unmount ta] 100019 D - 0xfffffe00077f5c00 [inm_free taskq] 100020 D - 0xfffffe00077f5a00 [in6m_free taskq] 100021 D - 0xfffffe00077f5800 [linuxkpi_irq_wq] 100022 D - 0xfffffe00077f5600 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00077f5600 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00077f5600 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00077f5600 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00077f5100 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00077f5100 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00077f5100 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00077f5100 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00077f4400 [firmware taskq] 100040 D - 0xfffffe0007bcc100 [crypto_0] 100041 D - 0xfffffe0007bcc100 [crypto_1] 100056 D - 0xfffffe00077f8200 [vtnet0 rxq 0] 100057 D - 0xfffffe00541f6500 [vtnet0 txq 0] 100058 D - 0xfffffe00541f6400 [vtnet0 rxq 1] 100059 D - 0xfffffe00541f6300 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe00580bf000 [virtio_balloon] 100065 D - 0xffffffff82836801 [deadlkres] 100069 D - 0xfffffe0058595000 [acpi_task_0] 100070 D - 0xfffffe0058595000 [acpi_task_1] 100071 D - 0xfffffe0058595000 [acpi_task_2] 100073 D - 0xfffffe00077f8100 [mca taskq] 100074 D - 0xfffffe0007bcba00 [CAM taskq] 100076 D - 0xfffffe0058594700 [ipsec_offload] db> show all locks Process 1227 (syz-executor) thread 0xfffffe005870d000 (100582) exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe000780f060) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4373 exclusive sx vm map (user) (vm map (user)) r = 0 (0xfffffe00586b34f0) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4369 shared sx killpg racer (killpg racer) r = 0 (0xfffffe00586e8490) locked @ /syzkaller/managers/i386/kernel/sys/kern/kern_fork.c:961 Process 1208 (syz-executor) thread 0xfffffe00587bb000 (100575) shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe005876b738) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4998 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 384 5199K 498 tcp_hpts 8 4865K 8 devbuf 4187 4324K 4215 sysctloid 35174 2073K 35249 vtbuf 24 1968K 46 kobj 335 1340K 499 filedesc 162 1291K 521 newblk 319 1104K 576 vfscache 3 1025K 3 pcb 91 671K 190 subproc 265 538K 1386 inodedep 69 538K 353 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 100 200K 100 acpica 1674 184K 56977 vmem 5 144K 7 pagedep 55 142K 193 tidhash 3 141K 3 tfo_ccache 1 128K 1 IP reass 1 128K 1 sem 4 106K 4 DEVFS1 106 106K 123 gtaskqueue 18 98K 18 LRO 22 85K 22 bus 1011 83K 5163 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 527 66K 527 ddb_capture 1 64K 1 kdtrace 328 60K 1826 umtx 432 54K 432 BPF 23 36K 57 hostcache 1 32K 1 shm 1 32K 1 DEVFS3 125 32K 135 plimit 81 31K 431 msg 4 30K 4 kbdmux 6 28K 6 temp 32 21K 2167 DEVFS_RULE 56 20K 56 ifaddr 67 19K 69 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 routetbl 130 16K 410 ithread 90 15K 90 bus-sc 34 15K 1690 eventhandler 163 14K 163 lltable 43 14K 47 ifnet 7 13K 7 ether_multi 152 13K 162 kenv 95 12K 95 GEOM 49 11K 431 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 in6_multi 65 9K 65 bmsafemap 3 9K 354 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 shmfd 1 8K 1 pfs_vncache 1 8K 1 kqueue 122 8K 1352 pwddesc 121 8K 1253 audit_evclass 240 8K 306 taskqueue 69 8K 69 sglist 6 7K 6 CAM DEV 3 6K 510 newdirblk 46 6K 180 cred 15 6K 233 pfs_nodes 22 6K 22 UMA 269 5K 269 pf_ifnet 10 5K 19 vt 11 5K 11 ufs_dirhash 10 5K 26 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 acpisem 28 4K 28 proc-args 136 3K 2434 DEVFSP 47 3K 101 selfd 45 3K 11938 terminal 11 3K 11 inpcbpolicy 85 3K 572 acpidev 20 3K 20 hhook 8 3K 10 dirrem 9 3K 298 clone 9 3K 9 uidinfo 3 3K 23 kcovinfo 36 3K 36 lockf 21 3K 503 netlink 2 3K 86 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 ip6ndp 12 2K 14 select 14 2K 118 Unitno 28 2K 96 sctp_ifa 13 2K 14 diradd 13 2K 314 CAM XPT 22 2K 543 in_multi 6 2K 8 tun 4 2K 4 toponodes 6 2K 6 ipsecpolicy 2 2K 2 session 11 2K 38 CC Mem 10 2K 186 msi 9 2K 9 softdep 1 1K 1 mkdir 8 1K 360 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 14 NFSD session 1 1K 1 CAM periph 4 1K 271 sctp_ifn 6 1K 14 ipsec 3 1K 3 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 89 pci_link 10 1K 10 osd 15 1K 203 freefile 5 1K 188 crypto 4 1K 4 encap_export_host 12 1K 12 cdev 2 1K 2 lkpikmalloc 8 1K 9 counter_rate 13 1K 13 chacha20random 1 1K 1 biobuf 1 1K 1 freework 2 1K 192 freeblks 1 1K 191 indirdep 1 1K 10 vnodes 1 1K 1 procdesc 2 1K 12 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 cryptodev 2 1K 75 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 4 pmchooks 1 1K 1 filecaps 5 1K 101 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 3465 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 35 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 10 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 0 sctp_atky 0 0K 0 sctp_atcl 0 0K 0 sctp_a_it 0 0K 10 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 tcp_pcm_rack 0 0K 0 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 0 filemon 0 0K 0 pf_table 0 0K 0 pf 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 mqdata 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 71 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 5 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 2 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6opt 0 0K 30 ip6_msource 0 0K 0 ip6_moptions 0 0K 0 in6_mfilter 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 0 in_mfilter 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 20 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 261 namei_tracker 0 0K 0 inotify 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 2 lio 0 0K 62 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 iov 0 0K 14829 ioctlops 0 0K 125 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 190 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 676 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 cache 0 0K 0 kexec 0 0K 0 jaildesc 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 ufshci 0 0K 0 twsbuf 0 0K 0 tpm_buffer 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 feeder 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 12 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 0 22474 0 14 34078720 0 RADIX NODE 152 29582 79 96659 0 62 4508472 0 mbuf 256 9087 673 32291 0 254 2498560 0 malloc-4096 4096 458 0 2304 0 2 1875968 0 BUF TRIE 152 348 11456 840 0 62 1794208 0 malloc-384 384 4159 11 4172 0 30 1601280 0 malloc-128 128 11834 101 12285 0 126 1527680 0 malloc-16384 16384 83 0 258 0 1 1359872 0 UMA Slabs 0 112 9288 1650 11873 0 126 1225056 0 vmem btag 56 14859 2964 17750 0 254 998088 0 malloc-65536 65536 13 0 16 0 1 851968 0 FFS inode 1168 620 17 809 0 8 744016 0 VM OBJECT 248 2460 148 19887 0 62 646784 0 pbuf 2664 0 210 0 0 2 559440 0 lkpicurr 168 2 3094 2 0 62 520128 0 THREAD 1860 205 11 582 0 8 401760 0 MAP ENTRY 96 3616 164 60769 0 126 362880 0 VNODE 440 658 62 849 0 30 316800 0 malloc-64 64 4459 77 5836 0 254 290304 0 malloc-16 16 14744 256 17763 0 254 240000 0 malloc-2048 2048 102 0 102 0 8 208896 0 FPU_save_area 832 207 36 749 0 16 202176 0 PROC 1368 121 22 1242 0 8 195624 0 malloc-32 32 5478 444 6351 0 254 189504 0 UMA Zones 768 241 3 241 0 16 187392 0 lkpimm 56 1 3095 1 0 254 173376 0 FFS2 dinode 256 620 25 808 0 62 165120 0 malloc-128 128 1141 99 26632 0 126 158720 0 filedesc0 1072 121 19 1253 0 8 150080 0 S VFS Cache 104 1023 264 1409 0 126 133848 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-32768 32768 4 0 124 0 1 131072 0 malloc-1024 1024 123 5 147 0 16 131072 0 socket 1024 98 22 2000 0 27 122880 0 DEVCTL 1024 20 100 148 0 0 122880 0 malloc-4096 4096 30 0 87 0 2 122880 0 malloc-256 256 342 93 924 0 62 111360 0 malloc-384 384 218 32 803 0 30 96000 0 malloc-256 256 334 41 2096 0 62 96000 0 malloc-128 128 607 106 1342 0 126 91264 0 tcp_log 416 107 109 8438 0 40 89856 0 UMA Kegs 384 228 5 228 0 30 89472 0 VMSPACE 584 101 32 1198 0 16 77672 0 malloc-128 128 452 106 617 0 126 71424 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-16384 16384 4 0 6 0 1 65536 0 malloc-256 256 182 43 546 0 62 57600 0 malloc-64 64 635 247 2840 0 254 56448 0 malloc-384 384 69 61 354 0 30 49920 0 malloc-8192 8192 6 0 7 0 1 49152 0 malloc-8192 8192 6 0 89 0 1 49152 0 malloc-384 384 102 18 454 0 30 46080 0 ripcb 376 69 51 152 0 30 45120 0 Files 80 268 282 9209 0 126 44000 0 tcp_inpcb 1304 10 23 186 0 8 43032 0 TURNSTILE 136 217 98 217 0 62 42840 0 pcpu-8 8 4782 338 5176 0 254 40960 0 malloc-128 128 200 110 217 0 126 39680 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-8192 8192 4 0 4 0 1 32768 0 pcpu-64 64 503 9 503 0 254 32768 0 PGRP 120 19 245 46 0 126 31680 0 malloc-256 256 66 54 461 0 62 30720 0 malloc-64 64 287 154 15019 0 254 28224 0 malloc-64 64 129 312 1890 0 254 28224 0 malloc-32 32 403 479 1056 0 254 28224 0 malloc-256 256 67 38 115 0 62 26880 0 udp_inpcb 408 6 57 222 0 30 25704 0 malloc-4096 4096 6 0 11 0 2 24576 0 malloc-2048 2048 10 2 27 0 8 24576 0 malloc-2048 2048 11 1 56 0 8 24576 0 pipe 736 21 12 446 0 16 24288 0 malloc-64 64 172 206 12117 0 254 24192 0 malloc-128 128 84 102 362 0 126 23808 0 malloc-128 128 97 89 1104 0 126 23808 0 Mountpoints 2816 2 6 2 0 4 22528 0 SLEEPQUEUE 88 217 39 217 0 126 22528 0 malloc-2048 2048 10 0 22 0 8 20480 0 malloc-1024 1024 17 3 17 0 16 20480 0 ksiginfo 112 119 61 252 0 126 20160 0 malloc-64 64 16 299 335 0 254 20160 0 malloc-64 64 134 181 159 0 254 20160 0 malloc-128 128 51 104 3677 0 126 19840 0 routing nhops 256 27 48 34 0 62 19200 0 malloc-256 256 26 49 231 0 62 19200 0 mbuf_cluster 2048 5 3 515 0 20 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-8192 8192 2 0 4 0 1 16384 0 malloc-8192 8192 2 0 22 0 1 16384 0 malloc-4096 4096 4 0 22 0 2 16384 0 malloc-1024 1024 12 4 524 0 16 16384 0 malloc-512 512 17 15 56 0 30 16384 0 PWD 40 85 319 240 0 254 16160 0 rtentry 168 30 66 34 0 62 16128 0 malloc-32 32 33 471 199 0 254 16128 0 malloc-32 32 86 418 235 0 254 16128 0 malloc-32 32 86 418 297 0 254 16128 0 malloc-32 32 89 415 188 0 254 16128 0 unpcb 320 11 37 1360 0 40 15360 0 malloc-256 256 19 41 116 0 62 15360 0 32 Bucket 256 8 52 34742 0 62 15360 0 malloc-2048 2048 3 3 38 0 8 12288 0 malloc-2048 2048 3 3 1085 0 8 12288 0 malloc-2048 2048 4 2 195 0 8 12288 0 malloc-512 512 9 15 9 0 30 12288 0 malloc-16 16 109 641 1906 0 254 12000 0 malloc-16 16 36 714 351 0 254 12000 0 malloc-16 16 53 697 414 0 254 12000 0 malloc-16 16 267 483 302 0 254 12000 0 malloc-384 384 21 9 74 0 30 11520 0 udplite_inpcb 408 0 27 12 0 30 11016 0 vmem 1856 2 3 2 0 8 9280 0 DIRHASH 1024 2 6 36 0 16 8192 0 malloc-8192 8192 1 0 27 0 1 8192 0 malloc-2048 2048 2 2 2 0 8 8192 0 malloc-1024 1024 4 4 44 0 16 8192 0 malloc-1024 1024 7 1 206 0 16 8192 0 malloc-1024 1024 8 0 8 0 16 8192 0 malloc-512 512 2 14 52 0 30 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 256 Bucket 2048 2 2 1137 0 8 8192 0 64 Bucket 512 4 12 20006 0 30 8192 0 ertt 72 10 102 186 0 126 8064 0 malloc-32 32 99 153 557 0 254 8064 0 malloc-32 32 26 226 3796 0 254 8064 0 malloc-16 16 5 495 8 0 254 8000 0 malloc-16 16 18 482 26033 0 254 8000 0 8 Bucket 80 4 96 411 0 126 8000 0 kenv 258 17 13 1073 0 30 7740 0 ttyoutq 256 8 22 168 0 62 7680 0 128 Bucket 1024 1 6 274 0 16 7168 0 cpuset 200 7 25 18 0 62 6400 0 epoch_record pcpu 256 4 12 4 0 62 4096 0 malloc-4096 4096 1 0 6 0 2 4096 0 malloc-4096 4096 1 0 262 0 2 4096 0 malloc-1024 1024 2 2 1140 0 16 4096 0 malloc-1024 1024 1 3 1 0 16 4096 0 malloc-512 512 3 5 51 0 30 4096 0 malloc-512 512 2 6 14 0 30 4096 0 malloc-512 512 1 7 1 0 30 4096 0 hostcache 64 1 62 1 0 254 4032 0 vtnet_tx_hdr 24 0 167 2136 0 254 4008 0 ttyinq 160 15 10 315 0 62 4000 0 malloc-16 16 4 246 5 0 254 4000 0 g_bio 440 0 9 6683 0 30 3960 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 malloc-384 384 1 9 1 0 30 3840 0 malloc-384 384 1 9 1 0 30 3840 0 malloc-256 256 11 4 499 0 62 3840 0 da_ccb 544 0 7 1763 0 16 3808 0 mqnode 416 3 6 3 0 30 3744 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 SMR CPU 32 8 87 8 0 254 3040 0 SMR SHARED 24 8 87 8 0 254 2280 0 mbuf_packet 256 5 0 432 0 254 1280 0 splice 184 0 0 0 0 62 0 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 70 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf Ethernet anchors 1240 0 0 0 0 8 0 0 pf anchors 1664 0 0 0 0 8 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 70 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 40 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_bbr_pcb 896 0 0 0 0 16 0 0 tcp_bbr_map 128 0 0 0 0 126 0 0 tcp_rack_pcb 1088 0 0 0 0 8 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 syncache 176 0 0 3 0 70 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 130 0 0 sctp_readq 152 0 0 0 0 70 0 0 sctp_chunk 152 0 0 0 0 70 0 0 sctp_raddr 736 0 0 0 0 27 0 0 sctp_laddr 48 0 0 12 0 254 0 0 sctp_asoc 2256 0 0 0 0 16 0 0 sctp_ep 1152 0 0 0 0 20 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 KNOTE 160 0 0 61 0 62 0 0 itimer 352 0 0 0 0 30 0 0 AIOLIO 272 0 0 31 0 30 0 0 AIOCB 552 0 0 36 0 16 0 0 AIO 208 0 0 127 0 62 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 NAMEI 1024 0 0 15711 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 L VFS Cache 320 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 cryptop 280 0 0 0 0 30 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 13 0 0 mbuf_jumbo_9k 9216 0 0 0 0 13 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 clpbuf 2664 0 0 13 0 4 0 0 vnpbuf 2664 0 0 0 0 4 0 0 nfspbuf 2664 0 0 0 0 4 0 0 swwbuf 2664 0 0 0 0 2 0 0 swrbuf 2664 0 0 0 0 4 0 0 ertt_txseginfo 40 0 0 1522 0 254 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 rl_entry 48 0 0 0 0 254 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 68 0 1 0 0 malloc-65536 65536 0 0 118 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 11 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 190 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-4096 4096 0 0 0 0 2 0 0 malloc-4096 4096 0 0 0 0 2 0 0 malloc-512 512 0 0 110 0 30 0 0 malloc-512 512 0 0 38 0 30 0 0 malloc-384 384 0 0 0 0 30 0 0 malloc-64 64 0 0 0 0 254 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 16 Bucket 144 0 0 435 0 62 0 0 4 Bucket 48 0 0 7 0 254 0 0 2 Bucket 32 0 0 450 0 254 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl db> serialport: VM disconnected.