last executing test programs: 6.567660067s ago: executing program 0 (id=1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe, @thr={0x0, 0x0}}}) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x3, 0x0) setsockopt(r2, 0x0, 0x6a, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ktimer_create(0x0, &(0x7f0000000700)={0x3, 0x1d, @sigval_ptr=0x5, @spare=[0x7, 0xf81, 0x1f2a9c89, 0xf54d, 0x800, 0x0, 0x0, 0x453f]}, &(0x7f0000000400)) syz_emit_ethernet(0x58, &(0x7f0000001280)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "ae029d", 0x22, 0x3a, 0xff, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, @mcast1, [{0x2, 0x1, "a2dd8b6d81d74308220780a8"}]}}}}}}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ksem_init(0x0, 0x0) r3 = socket(0x1c, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x31, 0x0, 0x1010) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, 0x1}, 0x1c) kqueue() mlockall(0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) mmap(&(0x7f000055f000/0x2000)=nil, 0x2000, 0x30000, 0x1010, 0xffffffffffffffff, 0x0) sync() 6.416315441s ago: executing program 3 (id=4): r0 = fork() mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = kqueue() bind$inet6(0xffffffffffffffff, 0x0, 0x0) aio_cancel(0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000040)=0x2, 0x4) sendto$inet(r2, &(0x7f0000000200)="69420055bfb48f140d6473c6f203f04ef80900000559f3f11b82079618d2a354f0b30c78df82c0512a7c64f8cdc42f35d03b7fa43d44ee2f1355063b11818abf8b61204b9b6838a59070b46d453ed603d73b1a7570", 0x55, 0x100, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1c, 0x1, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r6, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x2, 0x0, @local={0xac, 0x14, 0x0}}, 0x10) sendto$inet(r6, &(0x7f0000001180)="017a88ca8330d4f5ef2e52a27f685a1722ec5ec9d67a6015a0e6a0db75dddaa395dc8ad6ad357a23bc2e62ce7f337680f84936d556374f9eee59c76751277129fbd3b79351767a317387f641529ae7dcf61fd7b6719203f15cd30c4a5306811406f996883a6c71e7e979fd78965a2fcc16fc6c4baad81eb619aed659186a91324cdf2cc4b4671410f520fdf219b067afdc2bbcf7c56b42efa753f918a6cfc27260ee0b4931bd0a7cfd7838913079ca36bcd35ea9bf836192f527ab7daa650daa6c0e4893b979ef12526bb99d46155a9e6c1a7350a9cc51e9029573e9d93cd1699bcc73bb25877696ad0ea494d66052f367c3578eedeccabfc4372c04a1129e68e823ec6efab725694ab91854bd1fb70435596489d8e922bc970f393351a41d6544296779ff91feda15de341cb6aff5082ea0d36bbe6dd8ec2a128b11772a943b55c40e67058d5606954e821fd9a57c2593d17a223ac64248a73c835d5c4f1e936459c2674f0aef8ca49e426bb901d2b8dc48b58e963a24c5f62fe3e2471dccc81f6d2258ae02418d11465184869adeddb6c60b0f44beb3a4f52bfd1f848ec953a59cabefc7e935a84064d07211315bd4713f8276e70fb4000644ec3533f66079e780d90d791125a0448058b0e2365452eca540e7e247ab218642eeee75605274548e207c61c748fae8f0bdf0a4679087b7a6d8f57cbc4e87840d36e9fd66780c1ff19cbe5f74fc3c3c562bffb8ba5c7fb9daf7a5b02c7d05938b8162e7e870acc047cb9afeb4190ba91e222dfdad522588c26b6132f36e2811d50903ef8d4a82cb99662e411f405a7b136203adc93e4e5b70025e64785ea8b6e02d636021447da01c9cfe530fbc3277fadf03c6b6674080c22299e1af1f8f724579b74894a46795661e62c4105de1f458fd6316be9ec41256427890fea130e7d9aea2abf8c3dab06d595d86bef0272ceb6d50b96b6ac0737d531c81cbda927c4cae2378924561ce08c7bce258f69e7903bd839062c3767654cc84e698c73e4e1bd9701b7368a032186af44ff657a1428435079edd102e9f1086e5e7a4b6ef4ee20863bf67daf076c3f00ab287384b00bd9e6762c79d34e07e9b5b41c106f264e8d3d565c665c98d026eb11f9f3fd0714d29c7784287ddc634977467509d1ca01c07fc69ce16edf1fc7d91e8a88a1c37b669e0644280b2462328541b0bdf0491a81703154c31277247defd158ae2a962cf35ea8318257ad705a574e776cb5341b12d30a7e31cab6ae73c222adf8a356da66230673d9cd30869d2dcd09dfd87f47f6a758eaafaf38820bd4806e705367e6af88748281e57ab2a909424c8079863af49c99fd8ffcf1935e4a32670577f30beb868254b4b21aa83965ef7061deccd5de504a05c2be3e399ad7a862826d984a09f600afa501e663d28aeb3029b4dcc3fa3ba956830b5cb4a004ecf1d4cf6531e5419941a3c4b30f839d71967873e8fedf2d25ec24184b5b98b156c66624a72bc99b60bb918516fcee950f9cac1c6135f3b9e28cab6dc6be7b1f93baf4b860d5e0dac64f956ce93caf1f94d36300e296e9f6746dc4fa0a3e2e188c818481c5abca7d0be72cbeb0269ec8f29938f7534e3321cd3f4c4e6c1a29fa4280181757264de2adef909a56dd5486e1599089c0a77aa51beb1c0686c6e9713fc10f7789b5682183eccf955638b7e21c06490bb17abce59a88ca6bf734828e3a3e0fa7e9242b30f8007197f923ccfc5524500cac5aa7501fcc9b3e088c9e55b6f54e71145cbc0fbc23e213d3926123e7927580db233434b58ced4018cc09bae6ca329c73939905d260028a3321e67821aa9afc8430142ccacda7c0a54f8b51b300f0501424d7083342138b7d9823e72ad34a5b1654c2cb42a74594a6ad9c23847506b034a4866da7b38f855ecf2cd999ef29e996815c2cc143eeacd9284d4a481868231cbc8d6012ee3112f1e3e3d224ace0aac042e920d96233b59ed701b0c2e696300c35dabaa5e5ad18b1b581606f4c61e22927a6047f9f5e7faa1eb6631179fb5405273570e933e64068b95c3b31edb148920b359986470f46b9d428894aba20df28b4c955172", 0x5cd, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x2}, 0x10) shutdown(r6, 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x80010, r1, 0x0) ioctl$BIOCSETFNR32(r5, 0x80084282, &(0x7f0000000080)={0x7, 0x7}) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, &(0x7f00000001c0)={'rack\x00'}, 0x24) ktimer_settime(0x0, 0x0, &(0x7f0000000140)={{0x9}, {0x0, 0x200000000f50}}, &(0x7f00000005c0)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffff9c, 0x6, 0x40, &(0x7f0000000000)='newreno\x00', 0x8) mount(&(0x7f0000000000), 0x0, 0x8400004, 0x0) munlockall() r7 = setsid() setpgid(r0, r7) 6.351513305s ago: executing program 2 (id=3): sysarch$AMD64_SET_GSBASE(0x83, &(0x7f0000000040)) r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) setsockopt$inet6_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x4}, 0x10) open(&(0x7f0000000280)='./file0\x00', 0x1, 0x1d7) setsockopt$inet6_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0xc00, 0x0) r3 = dup(r2) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f00000000c0)={0x0, 0x18, 0x0, 0x0, 0x18, &(0x7f0000000040)="7063895300000000916d99e900"/24, 0x0, 0xfdffffff}) ioctl$CIOCCRYPT(r3, 0xc0306367, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x450c, &(0x7f0000000000), 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4) ioctl$BIOCGHDRCMPLT(r4, 0x40044274, &(0x7f0000000180)) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x6}, {0xfffa, 0x6, 0x97, 0x59}, {0x40, 0x3, 0x1, 0xe0979c1}]}) ksem_init(0x0, 0x0) r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) cap_rights_limit(r6, &(0x7f0000000140)=[0x20000000000fffd, 0x400000000000001]) fstatfs(r6, 0x0) ksem_post(0x0) symlink(0x0, &(0x7f00000000c0)='./file0\x00') kqueue() open(0x0, 0x400000, 0x181) setpriority(0x2, 0x0, 0xfe) socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) mount(&(0x7f0000000000), 0x0, 0x8400004, 0x0) 5.824348866s ago: executing program 1 (id=2): sysarch$AMD64_SET_GSBASE(0x83, 0x0) r0 = open$dir(0x0, 0x200, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) acct(0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x8e33cb7e2cd20cc8, 0x0) r2 = open$dir(0x0, 0x2000000, 0x126) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5) execve(0x0, &(0x7f0000000280), &(0x7f0000000440)=[&(0x7f00000002c0)='\x00']) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESHEX=r1, @ANYRES16=r0, @ANYRESDEC=r1, @ANYBLOB="931e6eeef038fa6d0a27c0a9d77e5ec0701ab753ff50d91b6c3572ce2bdda25ab0ffe4b4f74d28d690e5705e5cda82e43d4316d2cb699aed90431278233ddaceba72871ab8b95e49176acb451d83a02046b134c42e2fa315a24fbb90a5529ca8e045b5de4c88b76d9d568ddc91a087ccda695a954cc5f5a701378bf80d589a8d9257772294d7edef47fcc2756cf85f8a8c76e0307119c9c7df876c09550d7dd6eadf1da9b8c4c8b8b00cfbb3b0230e853eb1a881549210c2b06e6d3ee7ee2f300c9231"]) syz_emit_ethernet(0x72, &(0x7f0000000300)={@random, @remote, [{[{0x88a8, 0x7, 0x1, 0x4}], {0x8100, 0x3, 0x0, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, {0x10, 0x4, 0x1, 0x9, 0xfc7, 0x66, 0x192c, 0x0, 0x14, 0xfffe, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@rr={0x7, 0x7, 0x9, [@local={0xac, 0x14, 0x0}]}, @ssrr={0x89, 0x23, 0x1, [@broadcast, @rand_addr=0x5, @loopback, @rand_addr=0x9, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @rand_addr=0x7, @broadcast]}]}}}}}}}) r3 = socket$inet6(0x1c, 0x1, 0x0) setsockopt(r3, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @loopback={0x4}, 0x2}, 0x1c) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_emit_ethernet(0x1d1, &(0x7f0000000680)={@remote, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c900", 0x19b, 0x3a, 0xff, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="60b0009729ba34a7872c223bf01de3c4", {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @empty}}}}}}) ioctl$DIOCNATLOOK(r4, 0x8004745b, &(0x7f0000000080)) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp(r5, 0x11, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "2f5105", 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x6, 0x0, 0x0, 0x3}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0xac, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0x1c, 0x1c, 0x1, 0x40, @remote={0xfe, 0x80, '\x00', 0x0}, 0x3}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) rfork(0x85000) rfork(0x82060) thr_new(&(0x7f0000000180)={0x0, 0x7, &(0x7f0000001240), 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7fffffff, 0x10000000000002, 0x51]}, 0x68) 3.979942695s ago: executing program 2 (id=5): sysarch$AMD64_SET_GSBASE(0x83, 0x0) open$dir(0x0, 0x200, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x1, 0x84) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) acct(0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x8e33cb7e2cd20cc8, 0x0) r0 = open$dir(0x0, 0x2000000, 0x126) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5) execve(0x0, &(0x7f0000000280), &(0x7f0000000440)=[&(0x7f00000002c0)='\x00']) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c0000200800009078ac1400bbffffff034e214e"]) syz_emit_ethernet(0x7a, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb88a84f00810013000800450000640000000400099078ac1400bbffffffff0b0090780006000040250fc70066192c0014fffeac1400bbac1400bb070709ac1400aa892301ffffffff000000057f06000100000009ac1400aaac1400bb00000007ffffffff0000210064270000f8f2e69275ed325df37eb22f121d0c702d740d09a83a6de096af36e5de285bbb9e0029326378e04dbc93ecd9bf7209773bf75b82c563972bb872d286e8636d68d1f9298b862488d19312761f9666e596cee95f599c4b745f85398d40dbffbcde6c2c7657fe6cd1604d0087"]) r1 = socket$inet6(0x1c, 0x1, 0x0) setsockopt(r1, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0xfffffffc, @loopback={0x4}, 0x2}, 0x1c) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) freebsd10_pipe(&(0x7f0000000240)={0xffffffffffffffff}) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa7004f5b37d0786dd60c9000000303afffe8000000000000000000000000000bbff02390000000000000000000000000103019078f800000060000000009524ff0fb640000000a198de526df109fe8000000000000000000000000000aafe8000000000000000000000000000aa"]) ioctl$DIOCNATLOOK(r2, 0x8004745b, &(0x7f0000000080)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp(r3, 0x11, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "2f5105", 0x1c, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x6, 0x0, 0x0, 0x3}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0xac, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x1, 0x40, @remote={0xfe, 0x80, '\x00', 0x0}, 0x3}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) rfork(0x85000) rfork(0x82060) thr_new(&(0x7f0000000180)={0x0, 0x7, &(0x7f0000001240), 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7fffffff, 0x10000000000002, 0x51]}, 0x68) 3.351109414s ago: executing program 0 (id=6): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x1) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{0x3, 0xfffffffffffffffe, 0x80c3}], 0x1, 0x0, 0x0, 0x0) kevent(r2, &(0x7f0000000000)=[{0x3, 0xfffffffffffffffe, 0x80c3, 0x0, 0x203, 0x0, [0x0, 0x0, 0x4, 0x401]}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = open$dir(0x0, 0x40000400000002c2, 0x9e) pwritev(r3, 0x0, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$crypto(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$MDIOCATTACH(r0, 0xc1c06d00, &(0x7f0000000140)={0xffffffff, 0xc3d2, 0x1, &(0x7f0000000000)='\x00', 0x7, 0xc2d, 0x9, 0x17a, 0x1, 0x9, &(0x7f0000000100)='\x00', [0x2, 0x8, 0x10000, 0x8, 0xb7, 0xffffffff, 0x5, 0x3, 0xfffffff8, 0x2, 0xfff, 0x7fff, 0x3, 0x3, 0xff, 0x1, 0x5, 0x7, 0x9, 0x4, 0x72, 0x8, 0x293b298c, 0x2, 0x40, 0x7f, 0xd1e, 0x3, 0x9, 0xffffffff, 0x8, 0x1, 0x8, 0x80000000, 0xfc59, 0x7, 0x3138, 0x0, 0x9, 0x78fc, 0xa, 0x0, 0x9, 0x7fffffff, 0x3, 0xffff, 0x9, 0x5260, 0x2, 0x3, 0x8, 0x1, 0x10, 0xc, 0x3, 0x7, 0x5, 0x1, 0x9, 0x3, 0x3, 0x9, 0x7, 0x5, 0xffff, 0x0, 0x4, 0x7, 0xff6, 0x4, 0x5, 0x4, 0x3, 0x7, 0x9, 0xc, 0xf350, 0x7, 0x5, 0x5, 0x5, 0x4, 0xd77, 0x5, 0x0, 0x8000, 0xff, 0xf05, 0x2, 0x3, 0x1, 0x80000000, 0x5, 0xf, 0x5, 0x5]}) ioctl$DIOCSETTIMEOUT(r0, 0xc008441d, &(0x7f0000000040)={0xfffffff7, 0xb}) r5 = kqueue() kevent(r5, &(0x7f00000007c0)=[{0xfffffffffffffffd, 0xfffffffffffffff9, 0x6fd0e9ee5e208145, 0x8, 0xe8c5, 0x0, [0xfffffffffffffffc, 0x4000000000000000, 0x0, 0x2]}, {0x5, 0xfffffffffffffff3, 0xe2, 0x4, 0x2, 0x1, [0xfffffffffffffffa, 0x7fffffff, 0x5, 0x7ff]}, {0x2, 0xfffffffffffffff9, 0x0, 0x80000000, 0x4, 0x9a, [0xfffffffffffffffe, 0x1, 0xa, 0x4cf]}, {0x4, 0xfffffffffffffffc, 0x61, 0xc0000000, 0x5, 0x0, [0x2, 0x1, 0x2, 0x1]}], 0x4, 0x0, 0x0, 0x0) freebsd10_pipe(0x0) chflagsat(r5, &(0x7f0000000940)='./bus/\x00', 0x40300, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000300000000000019078ac1400bbe00000010348907800000000450000000000000000880000e000000100000000f8ac2f944ae4e84b81000000b68aceb81e502024bae83c0e59b199335ad78c98cac0b6d041261e13f5e05ad9dab21322ad692ce4e166"]) close(0xffffffffffffffff) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r6, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c40), 0x200, 0x0) r7 = fork() ktrace(0x0, 0x2, 0x1000, r7) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$kbd(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x100000, 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffff870698b0094f7dcf4801e80d6171bbde1d010800007b9d77f6000000b086000000"]) 3.024549593s ago: executing program 1 (id=7): mount(&(0x7f0000000080)='cd9660\x00', 0x0, 0xc0100640, &(0x7f0000000180)="d52f2d464764674133000044969c65071707e0299a7d9775bb66f27e4d5ec7e4d89357743f78450a87a62c21c857943cf5ae4c5ff5090e0abc9b704f6b312dec6b07a156a1fa9d9502cf492918357691ddb8ad944886bf41813fc872f73d2bde3a9c891bd38c20b0a86c3bc21cf0db3cbc1b5e8cbed938c7fbf0be21cde90c7d64dc4ef3275f38fab4e0cd99995500a5de878b3f68b7db1f23ae661e6175") setresgid(0x0, 0xee00, 0x0) setresgid(0x0, 0xee00, 0xee01) procctl$PROC_ASLR_STATUS(0x0, 0x0, 0xe, &(0x7f0000000440)) 3.008238247s ago: executing program 1 (id=8): ktimer_create(0x0, 0x0, &(0x7f00000012c0)) ktimer_create(0x0, 0x0, &(0x7f0000000500)) ktimer_create(0x0, 0x0, &(0x7f0000000380)) ktimer_create(0x0, 0x0, &(0x7f00000000c0)) ktimer_create(0x4, 0x0, &(0x7f0000000080)) ktimer_create(0x0, 0x0, &(0x7f00000012c0)) ktimer_create(0x4, 0x0, &(0x7f00000003c0)) ktimer_create(0x0, 0x0, &(0x7f0000000600)) ktimer_create(0x0, 0x0, &(0x7f0000000200)) ktimer_create(0x0, 0x0, &(0x7f0000000340)) ktimer_create(0x0, 0x0, &(0x7f0000000140)) ktimer_create(0x0, 0x0, &(0x7f0000000280)) ktimer_create(0x0, 0x0, &(0x7f0000000100)) r0 = socket$inet6(0x1c, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000040), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$dupfd(r1, 0x0, r0) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, &(0x7f0000000080)={0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x400]}) cpuset_setaffinity(0x3, 0x9, 0x0, 0xcf, &(0x7f00000000c0)) sendto$inet6(r0, 0x0, 0x0, 0x288, &(0x7f00000000c0)={0x1c, 0x1c, 0x3, 0x0, @mcast2, 0x3}, 0x1c) 2.892074805s ago: executing program 1 (id=9): sysarch$AMD64_SET_GSBASE(0x83, 0x0) open$dir(0x0, 0x200, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x1, 0x84) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) acct(0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x8e33cb7e2cd20cc8, 0x0) r0 = open$dir(0x0, 0x2000000, 0x126) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5) execve(0x0, &(0x7f0000000280), &(0x7f0000000440)=[&(0x7f00000002c0)='\x00']) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c0000200800009078ac1400bbffffff034e214e"]) syz_emit_ethernet(0x72, &(0x7f0000000300)={@random, @remote, [{[{0x88a8, 0x7, 0x1, 0x4}], {0x8100, 0x3, 0x0, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, {0x10, 0x4, 0x1, 0x9, 0xfc7, 0x66, 0x1928, 0x0, 0x14, 0x38, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@rr={0x7, 0x7, 0x9, [@local={0xac, 0x14, 0x0}]}, @ssrr={0x89, 0x23, 0x1, [@broadcast, @rand_addr=0x5, @loopback, @rand_addr=0x9, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @rand_addr=0x7, @broadcast]}]}}}}}}}) r1 = socket$inet6(0x1c, 0x1, 0x0) setsockopt(r1, 0x29, 0x40, &(0x7f0000000000)="60c6eabb", 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x0, 0x0, @loopback={0x4}, 0x2}, 0x1c) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) ioctl$DIOCNATLOOK(r2, 0x8004745b, &(0x7f0000000080)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp(r3, 0x11, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"]) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0xac, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x1, 0x40, @remote={0xfe, 0x80, '\x00', 0x0}, 0x3}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) rfork(0x85000) rfork(0x82060) thr_new(&(0x7f0000000180)={0x0, 0x7, &(0x7f0000001240), 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7fffffff, 0x10000000000002, 0x51]}, 0x68) 2.884804236s ago: executing program 2 (id=10): r0 = socket(0x1c, 0x1, 0x0) connect(r0, &(0x7f0000000280)=@un=@abs={0x8, 0x1, 0x0, 0x1}, 0x8) freebsd11_mknod(&(0x7f00000002c0)='.\x00', 0x6000, 0x9) ktimer_create(0x4, 0x0, 0x0) cpuset_getid(0x1, 0x8, 0x80000000, &(0x7f0000000240)) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) r3 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FILEMON_SET_FD(r3, 0x20006601, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x24, &(0x7f0000000200)="59e17b1df38dbec56e9281a905ccaba07a5824cd6d72644ebacc3ce264d46c6d9681400e31a3e18e", 0x28) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x9, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x22, 0x0, 0x0) connect$inet(r2, &(0x7f0000000400)={0x10, 0x2, 0x2, @local={0xac, 0x14, 0x0}}, 0x10) sendmsg$unix(r2, &(0x7f0000002580)={0x0, 0x19, &(0x7f0000000100)=[{&(0x7f0000000140)="4640c719021399600f76aac84cf9aec359d5c9ce67f6453118a671000080e0c44ebc7bc3ef22bca56aa8f60468ba787ced0d999f926f54ab63ee1e", 0xfe22}], 0x1, 0x0, 0x0, 0x180}, 0x20104) getpid() r4 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast2}}, {{0x1c, 0x1c, 0xffffffffffffffff, 0x0, @rand_addr="fefcb1235ed191d855d55a61f51d8fea"}}}, 0x108) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @loopback}, 0x1c) rfork(0x3060) 2.183061917s ago: executing program 3 (id=11): pipe2(&(0x7f0000000000), 0x100000) open$dir(&(0x7f0000000300)='./file0/file0\x00', 0x40000, 0x100) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)) semget(0x0, 0x1, 0x281) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x3) socket$inet6_udplite(0x1c, 0x2, 0x88) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r1, 0x6, 0x2000, &(0x7f00000003c0)={'rack\x00'}, 0x24) r2 = socket(0x11, 0x10000000000003, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[]) setsockopt$sock_int(r2, 0xffff, 0x40, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000140)="b10005019000e803480308c75786ca900f0e08fecea11ea8fef96ec2c73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa79230000f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282934e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020200a371a3f8000000000000000000010090d2c4e5187c00", 0xb1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0) syz_extract_tcp_res(&(0x7f00000002c0), 0x6, 0xc) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/19, 0x13) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) thr_suspend(&(0x7f0000000200)={0x100000001, 0x7ff}) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) getsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000280), &(0x7f0000000340)=0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) chroot(0x0) aio_write(&(0x7f0000000340)={r3, 0x80000001, 0x0, 0x0, [], 0x8000000000000000, 0x0, 0x0, {0x2, 0x7, 0x0}, {0x0, 0x0, @sival_int=0x10, @ke_flags}}) mkdir(&(0x7f0000000440)='./file0\x00', 0xe5b65c82281e0e9d) socket(0x1b, 0x3, 0x0) 2.056736664s ago: executing program 1 (id=12): minherit(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x2) madvise(&(0x7f00008ab000/0x1000)=nil, 0x1000, 0x2) cap_rights_limit(0xffffffffffffffff, &(0x7f0000000140)=[0x20000207fffffdc, 0x9]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x4b, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000001c0)=0x2, 0x4) sendto$inet(r1, 0x0, 0x0, 0x20000, &(0x7f0000000100)={0x10, 0x2, 0x0, @multicast2}, 0x10) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r4 = fork() sigqueue(r4, 0xf, @sival_int=0x8000) r5 = socket$inet6(0x1c, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = fork() rtprio(0x1, r6, &(0x7f00000000c0)={0x4, 0x14}) setsockopt(r5, 0x29, 0x40, &(0x7f0000000000)="77941fc7", 0x4) bind$inet6(r5, &(0x7f0000000040)={0x17, 0x1c, 0x0, 0x0, @loopback={0x4}, 0xa27}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x2e, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0x0}}, 0x14) connect$inet6(r5, &(0x7f0000000140)={0x1c, 0x1c, 0x1, 0x8, @empty, 0xfffffffe}, 0x1c) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) rfork(0x3060) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 2.055005865s ago: executing program 2 (id=13): r0 = kqueue() kevent(r0, &(0x7f00000007c0)=[{0xfffffffffffffffd, 0xfffffffffffffff9, 0x6fd0e9ee5e208145, 0x8, 0xe8c5, 0x0, [0xfffffffffffffffc, 0x4000000000000000, 0x0, 0x2]}, {0x0, 0xfffffffffffffffb, 0x9, 0x2, 0x9, 0x7, [0x4, 0x8000000000000001, 0x0, 0x2]}, {0x5, 0xfffffffffffffff3, 0xe2, 0x4, 0x2, 0x1, [0xfffffffffffffffa, 0x7fffffff, 0x5, 0x7ff]}, {0x2, 0xfffffffffffffff9, 0x0, 0x80000000, 0x4, 0x9a, [0xfffffffffffffffe, 0x1, 0xa, 0x4cf]}, {0x4, 0xfffffffffffffffc, 0x61, 0xc0000000, 0x5, 0x0, [0x2, 0x1, 0x2, 0x1]}], 0x5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0) freebsd10_pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) chflagsat(r0, &(0x7f0000000940)='./bus/\x00', 0x40300, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000300000000000019063ac1400bbe0000001034890780000000045661393e4f00511f90000000000000000880000e000000100000000"]) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000340)={r2, 0x80000001, &(0x7f0000000300)="e2", 0x1, [0xe], 0x0, 0x5, 0x0, {0x0, 0x7, 0x0}, {0x3, 0xf, @sigval_int=0x7, @thr={&(0x7f00000002c0)="c4e131ee72236544327d08f20f2a6babc461e5e556b9c4a29dbca332233333865700f2abd923c4c3fd01f228640f186a93", &(0x7f0000000400)="23b871a06e"}}}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) rfork(0x96014) sync() socket(0x1c, 0x2, 0x3) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00'], 0x0) ktimer_gettime(0x0, 0x0) ktimer_settime(0x0, 0x1, &(0x7f00000001c0)={{0xe1a, 0x1ff}, {0x6, 0x6}}, &(0x7f0000000200)) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x13}, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x101, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="fb000000000000000000000086dd60826e03000e000000000100000000000e14fc11133f6400fe800000000000"]) chroot(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) close(r1) socket$inet6_tcp(0x1c, 0x1, 0x0) 1.890642188s ago: executing program 0 (id=14): r0 = kqueue() syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000383a00fe8000000000000000000000000000bbff0200000000000000000000000000010200907800000000609a8cace8fffffffe8000000000000000000000000000bb00000f000000000000000000000000406200000000000000cbf5413d966322e6742c2aa6d27105df57f9340043423e1b461283d5e06b3486152bbfb97170e916c9daba938eb22081f5525e673d08ba8799742930c3bbfc40342446459f06dc68dbe1fb996285d3a503d15c08c7837f53463ee37425e413ca7992a33aea0fd02a867aa10e"]) kevent(r0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) setgroups(0x0, 0x0) kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x8]}], 0x1, 0x0, 0x0, 0x0) freebsd11_fhstatfs(0x0, 0x0) r1 = getpid() rtprio(0x1, r1, &(0x7f0000000580)={0x2, 0x4}) shmctl$IPC_STAT(0x0, 0x2, 0x0) r2 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x17, 0x0, &(0x7f0000000080)) freebsd11_lstat(&(0x7f0000000500)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0xee00) open$dir(&(0x7f0000000040)='./file0\x00', 0x110206, 0x0) setgroups(0x0, &(0x7f00000005c0)) setgroups(0x0, 0x0) rfork(0x96014) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x40005a28, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x3863) freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) extattr_set_link(&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='\x90\xcf\xa3+\x00-=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\xb6\xc9:PM\x16SU\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6.\xe9\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\xecq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4\x81\xed\xac\xa8\x95\xb8\x99\xe7\x1c', &(0x7f00000005c0)="60029ba40b17654701378516e4cde5beff4bb49b7f4a8eb42a6a810a8c7c6e776f226944f21879f180273e20f55c32d5fb000000000000000088fe71ed14272651c3629a468bf96f81", 0x49) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x54, &(0x7f0000000900)={0x6, {{0x10, 0x2, 0x1}}, {{0x10, 0x2, 0x1, @multicast1}}}, 0x108) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x84}, 0x93cc8fba5e33e642) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x100000, &(0x7f00000005c0)) extattr_delete_link(&(0x7f0000000580)='./file0\x00', 0x1, &(0x7f00000003c0)='\x90\xcf\xa3+\x00\x02=\\5\x81\xb2(\x8c&\xd9D\xbe\x97\xc7\"\xde\"\rZ\x04\x1eC\xd3\xcb&\x95\xe8X\xb6\x17\x99\xa6\xe4\xef\xe8\xd6T\\\x93\x1f\xce\x19\xa1#Y\x1c\f\xfa\\07\x11\xd1=\xb1\xc5\x9d\xb6M|\xc6@\x11H\xc4\x04\xaeQ\xffi\\\xa6?\xf2\x01O\xd6\xcc\xed[a\x9c\x14\xecRRn\ab\xe2\xf8u}\xad\x9a\xb8\x1d\x11\a\xa4\xf4o\xce \xe7\xafsZ\xb1.P\xa5\xc6\xcf\"w$\x0f\xda\x81f\x83M&\x99\xcfn\xae\xe1p\x14\x95\xef\xabb9x\\\a\xf6\xcap\xbf\xe8?\xf5D\xad@\xe3\x13\xb3\xea\xecS\x1c6\xb4\xd9\xd7$/\x8bU\xe1\x88/C\xba\xb4}\x88\'+X\xf2R\xe1\x14\x81Q\xc0\xfb\x0f\xc8n\xa2\x1eq\x94\xcf&\xcc\xe3\x11\xe1\xe2Q\xbc\xd4.4') r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 1.467879494s ago: executing program 1 (id=15): fork() (async) r0 = fork() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000018c0), 0x800, 0x0) setsockopt$inet6_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) cpuset_setdomain(0x3, 0x5, 0x0, 0x8, &(0x7f0000000000)={[0x1]}, 0x1) nanosleep(&(0x7f0000000080)={0x64fd, 0xfffffffffffffe00}, 0x0) (async) nanosleep(&(0x7f0000000080)={0x64fd, 0xfffffffffffffe00}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r2, 0x80000001, &(0x7f00000004c0)="4509ee8f", 0x4, [0x100, 0x8], 0x200000000000000, 0x20, 0x0, {0x4, 0x7, 0x0}, {0x0, 0x20000005, @sigval_ptr=0xb962, @tid=r0}}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x40000, 0x0) r4 = socket$inet6(0x1c, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x7, @remote={0xfe, 0x80, '\x00', 0x0}, 0x3}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x7, @remote={0xfe, 0x80, '\x00', 0x0}, 0x3}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x3, 0x0, @rand_addr="fff71fdcedff000080009e000000e216", 0x3}, 0x1c) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x12, r3, 0x0) dup2(r1, r1) (async) dup2(r1, r1) socket$inet6_tcp(0x1c, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x24, &(0x7f0000000340)='$F', 0x2) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f00000001c0)=0x6, 0x4) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) (async) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r7 = socket(0x2, 0x3, 0x0) getsockopt(r7, 0x0, 0x68, 0x0, 0x0) (async) getsockopt(r7, 0x0, 0x68, 0x0, 0x0) getpgid(0x0) r8 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r8, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) preadv(r6, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) (async) preadv(r6, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/65, 0x41}], 0x1) (async) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/65, 0x41}], 0x1) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, 0xffffffffffffffff, 0x0) 834.55059ms ago: executing program 0 (id=16): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000002, &(0x7f0000000040)="e2", 0x1, [], 0x1, 0x5, 0xfffffffc, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int=0xe, @ke_flags=0xed546d30250acf2}}) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x3, 0x0) setuid(0xffffffffffffffff) cpuset_setaffinity(0x3, 0x4, 0x1e, 0x8, &(0x7f0000000380)={[0x2]}) setsockopt(r2, 0x0, 0x6a, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ktimer_create(0x0, &(0x7f0000000700)={0x3, 0x1d, @sigval_ptr=0x5, @spare=[0x7, 0xf81, 0x1f2a9c89, 0xf54d, 0x800, 0x0, 0x0, 0x453f]}, &(0x7f0000000400)) syz_emit_ethernet(0x58, &(0x7f0000001280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000086dd60ae029d00223afffe8000000000000000000000000000aaff02000000000000000000000000000187009078ff0100000000000000000000000000010201a2dd8b6d81d74308220780a80000"]) setresuid(0x0, 0x0, 0xee00) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x8001) lchmod(&(0x7f0000000240)='./file0\x00', 0x62) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f00000000c0)='{-,\x00'], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ksem_init(0x0, 0x0) r3 = socket(0x1c, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x31, 0x0, 0x1010) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x0, 0x0, @rand_addr="53ed038dbe4f561e9763ca229a99399f", 0x1}, 0x1c) kqueue() freebsd11_mknod(0x0, 0x1000, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x108) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) socket(0x17, 0x20000000, 0x82) openat$crypto(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) 770.46391ms ago: executing program 2 (id=17): kevent(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0xa, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) cpuset_setaffinity(0x1, 0x4, 0x6, 0x55, &(0x7f0000000040)) aio_write(&(0x7f0000000140)={0xffffffffffffffff, 0x800, 0x0, 0x0, [0x40], 0x2, 0x0, 0x1, {0xd3, 0x0, 0x0}, {0x0, 0xfffffffe, @sigval_ptr=0xa1cf, @thr={0x0, 0x0}}}) r0 = socket(0x2, 0x1, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd609f096200103a0000000000000000000000000000000000ff0200000000000000000000000000018605907800000000"]) freebsd10_pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) lchmod(&(0x7f0000000100)='./file0\x00', 0x2) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x10000, &(0x7f0000000140)=0xb, 0x4) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x21596174, @mcast2, 0xfffffffc}}, {{0x1c, 0x1c, 0x2, 0x7, @remote={0xfe, 0x80, '\x00', 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0xfffffffe, @mcast1, 0x3}}, {{0x1c, 0x1c, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x51, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x0, 0xfffffffe, @mcast2, 0x5}}, {{0x1c, 0x1c, 0x1, 0x0, @ipv4}}}, 0x108) bind$inet6(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r2) socket(0x10, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sigaltstack(0xffffffffffffffff, 0x0) munlockall() aio_suspend(&(0x7f0000000280)=[{0xffffffffffffffff, 0x180000000000000, &(0x7f0000000140), 0xffffffffffffff1d, [0x24, 0x7], 0x5, 0x5, 0x48754158, {0x4, 0x3, 0x0}, {0x0, 0xd, @sigval_int=0x9, @tid=0xffffffffffffffff}}, {r0, 0x6, 0x0, 0x0, [0x3, 0x3], 0x10000003ff, 0x4, 0x98c3, {0x2, 0xf, 0x0}, {0x3, 0x10, @sigval_int=0x8000, @spare=[0x4, 0x10000, 0x2, 0x1, 0x5, 0xd3, 0x201, 0xffff]}}], 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) select(0xff01, &(0x7f0000000580)={0x9, 0xfff, 0x6, 0x9, 0xfffffffffffffffb, 0x1, 0xff, 0x5}, &(0x7f00000005c0)={0xc, 0x93, 0x0, 0xffffffff, 0x4a3fe2a7, 0x46, 0x0, 0x7}, &(0x7f0000000600)={0x7, 0x5, 0x0, 0xdf2f, 0xab62, 0x3, 0x8, 0x2}, &(0x7f0000000640)={0x6, 0x4}) open(&(0x7f0000000b40)='./file0\x00', 0x7843d88b80d1cecd, 0x100) truncate(&(0x7f0000000080)='./file0\x00', 0x8000) open$dir(&(0x7f00000003c0)='./file0\x00', 0x8000, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x8001) lchmod(&(0x7f0000000240)='./file0\x00', 0x62) 0s ago: executing program 3 (id=18): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x4) aio_write(&(0x7f0000000240)={r0, 0x80000005, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x5, 0x0, {0x0, 0x1, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x2) bind$bt_l2cap(r1, &(0x7f0000000180)={0x81, 0x4b, 0x3, 0x6, 0x5}, 0xa) r2 = socket(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2, 0x2, @loopback}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlinkat(&(0x7f0000000dc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet6_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f0000000040)={'rack\x00'}, 0x24) sendto(r2, &(0x7f0000000200)="c6fa2f6445", 0x5, 0x104, 0x0, 0x0) madvise(&(0x7f00002d6000/0x2000)=nil, 0x2000, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f00000001c0), 0x4) freebsd12_shm_open(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x110) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. Expensive callout(9) function: 0xffffffff8146c920(0xfffffe006dd8f500) 0.004369602 s Out of ktrace request objects. panic: vm_object_terminate_single_page: page 0xfffffe0002627a28 does not belong to a queue cpuid = 1 time = 1751244013 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056d944f0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056d94650 vpanic() at vpanic+0x257/frame 0xfffffe0056d94810 panic() at panic+0xb5/frame 0xfffffe0056d948d0 vm_object_terminate_single_page() at vm_object_terminate_single_page+0x210/frame 0xfffffe0056d94910 pctrie_reclaim_resume_cb() at pctrie_reclaim_resume_cb+0xf5/frame 0xfffffe0056d94970 vm_object_terminate() at vm_object_terminate+0x232/frame 0xfffffe0056d94a30 vm_object_deallocate() at vm_object_deallocate+0x617/frame 0xfffffe0056d94b10 vm_map_process_deferred() at vm_map_process_deferred+0x1a0/frame 0xfffffe0056d94b50 vmspace_dofree() at vmspace_dofree+0xfd/frame 0xfffffe0056d94b90 vmspace_exit() at vmspace_exit+0x278/frame 0xfffffe0056d94c50 exit1() at exit1+0x99b/frame 0xfffffe0056d94cf0 sys_exit() at sys_exit+0x28/frame 0xfffffe0056d94d10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056d94f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056d94f30 --- syscall (1, FreeBSD ELF64, exit), rip = 0x3a1d1a, rsp = 0x82130e2f8, rbp = 0x82130e300 --- KDB: enter: panic [ thread pid 839 tid 100158 ] Stopped at kdb_enter+0x6e: movq $0,0x25b9ce7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff827bb8c0 .str.27 rsp 0xfffffe0056d94630 rbp 0xfffffe0056d94650 rsi 0 rdi 0xffffffff81618b29 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x3f r12 0xfffffe0054120000 r13 0xfffffffffffffffd r14 0xffffffff827bb8c0 .str.27 r15 0 rip 0xffffffff816026ae kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25b9ce7(%rip) db> show proc Process 839 (syz-executor) at 0xfffffe0054110ae0: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 767 at 0xfffffe0007826000 ABI: FreeBSD ELF64 flag: 0x10002000 flag2: 0x40000 arguments: ./syz-executor exec reaper: 0xfffffe0007809040 reapsubtree: 1 sigparent: 20 vmspace: 0xffffffff83b478e0 (map 0xffffffff83b478e0) (map.pmap 0xffffffff83b47980) (pmap 0xffffffff83b479f0) threads: 1 100158 Run CPU 1 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 845 769 769 0 R (threaded) syz-executor 100088 RunQ syz-executor 100169 RunQ syz-executor 844 768 768 0 R (threaded) syz-executor 100134 RunQ syz-executor 100166 S select 0xfffffe006def55c0 syz-executor 100170 S uwait 0xfffffe00584e9380 syz-executor 842 839 767 0 S uwait 0xfffffe0053ec2f00 syz-executor 841 839 767 0 S uwait 0xfffffe0053ec2e00 syz-executor 839 767 767 0 RE CPU 1 syz-executor 837 1 767 0 S uwait 0xfffffe00584e9c80 syz-executor 827 1 766 0 S uwait 0xfffffe005963aa80 syz-executor 826 814 826 0 Ss select 0xfffffe006def56c0 dhclient 820 1 769 0 S uwait 0xfffffe00584e9780 syz-executor 819 1 819 0 Ss select 0xfffffe006def5640 dhclient 814 789 424 65 S select 0xfffffe006def57c0 dhclient 807 0 0 0 DL aiordy 0xfffffe00540eb5a0 [aiod4] 806 0 0 0 DL aiordy 0xfffffe0007826ac0 [aiod3] 805 0 0 0 DL aiordy 0xfffffe000780a5c0 [aiod2] 804 0 0 0 DL aiordy 0xfffffe00540ebb00 [aiod1] 789 424 424 0 S wait 0xfffffe00540ec5c0 sh 769 765 769 0 R syz-executor 768 765 768 0 R syz-executor 767 765 767 0 R syz-executor 766 765 766 0 R syz-executor 765 763 763 0 S select 0xfffffe006def5ec0 syz-executor 763 761 763 0 Ss sigsusp 0xfffffe0054008bb0 csh 761 682 761 0 Ss select 0xfffffe00593d8b40 sshd 748 1 748 0 Ss+ ttyin 0xfffffe0057dfa8b0 getty 747 1 747 0 Ss+ ttyin 0xfffffe00594908b0 getty 746 1 746 0 Ss+ ttyin 0xfffffe00594910b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe00594918b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe0053f6d0b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe0053f6d8b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0053f6e0b0 getty 741 1 741 0 Ss+ ttyin 0xfffffe0053f6e8b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe0053f700b0 getty 738 1 18 0 S+ piperd 0xfffffe006b4229e0 logger 737 736 18 0 S+ nanslp 0xffffffff83b9d580 sleep 736 1 18 0 S+ wait 0xfffffe00540e9ac0 sh 686 1 686 0 Ss nanslp 0xffffffff83b9d580 cron 682 1 682 0 Ss select 0xfffffe00593d8c40 sshd 495 1 495 0 Ss select 0xfffffe00593d8d40 syslogd 424 1 424 0 Ss wait 0xfffffe0054007020 devd 423 1 423 65 Ss select 0xfffffe006ddf8e40 dhclient 338 1 338 0 Ss select 0xfffffe00593d8ec0 dhclient 335 1 335 0 Ss select 0xfffffe0059674dc0 dhclient 17 0 0 0 DL syncer 0xffffffff83cbafa0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0007828040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83cb9560 [bufdaemon] 100083 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100095 D sdflush 0xfffffe00596bd4e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d04400 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100078 D psleep 0xffffffff83cea4c8 [dom0] 100081 D launds 0xffffffff83cea4d4 [laundry: dom0] 100082 D umarcl 0xffffffff81dd8c90 [uma] 7 0 0 0 DL - 0xffffffff8391acd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff843b9980 [pf purge] 5 0 0 0 DL waiting 0xffffffff84789700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff838e5340 [doneq0] 100047 D - 0xffffffff838e52c0 [async] 100076 D - 0xffffffff838e5140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ce5d80 [crypto] 100044 D crypto_ 0xfffffe0007a6fc30 [crypto returns 0] 100045 D crypto_ 0xfffffe0007a6fc80 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe0053ff0088 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b45f20 [g_event] 100038 D - 0xffffffff83b45f40 [g_up] 100039 D - 0xffffffff83b45f60 [g_down] 2 0 0 0 RL (threaded) [clock] 100031 Run CPU 0 [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce6820 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c36ff0 [swapper] 100005 D - 0xfffffe0053e9c800 [softirq_0] 100006 D - 0xfffffe0053e9c700 [softirq_1] 100007 D - 0xfffffe0053e9c600 [if_io_tqg_0] 100008 D - 0xfffffe0053e9c500 [if_io_tqg_1] 100009 D - 0xfffffe0053e9c400 [if_config_tqg_0] 100010 D - 0xfffffe0007765b00 [kqueue_ctx taskq] 100011 D - 0xfffffe0007765a00 [jail_remove taskq] 100012 D - 0xfffffe0007765900 [bus taskq] 100015 D - 0xfffffe0007765600 [thread taskq] 100017 D - 0xfffffe0007765400 [aiod_kick taskq] 100018 D - 0xfffffe0007765300 [deferred_unmount ta] 100019 D - 0xfffffe0007765200 [inm_free taskq] 100020 D - 0xfffffe0007765100 [in6m_free taskq] 100021 D - 0xfffffe0007765000 [linuxkpi_irq_wq] 100022 D - 0xfffffe0007764e00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0007764e00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0007764e00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0007764e00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0007764d00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0007764d00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0007764d00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0007764d00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0007764a00 [firmware taskq] 100041 D - 0xfffffe0007764700 [crypto_0] 100042 D - 0xfffffe0007764700 [crypto_1] 100057 D - 0xfffffe0007764300 [vtnet0 rxq 0] 100058 D - 0xfffffe0007764200 [vtnet0 txq 0] 100059 D - 0xfffffe0007764100 [vtnet0 rxq 1] 100060 D - 0xfffffe0007764000 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe0057d7eb80 [virtio_balloon] 100066 D - 0xffffffff827c0c60 [deadlkres] 100070 D - 0xfffffe00593dc300 [acpi_task_0] 100071 D - 0xfffffe00593dc300 [acpi_task_1] 100072 D - 0xfffffe00593dc300 [acpi_task_2] 100074 D - 0xfffffe0007765c00 [mca taskq] 100075 D - 0xfffffe0007764600 [CAM taskq] 100077 D - 0xfffffe00593db600 [ipsec_offload] 843 766 766 -1 Z syz-executor db> show all locks Process 845 (syz-executor) thread 0xfffffe0054128780 (100169) exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007cf8a08) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_bio.c:4022 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006df02e30) locked @ /syzkaller/managers/main/kernel/sys/ufs/ffs/ffs_vfsops.c:1754 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe00774963e0) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_lookup.c:1130 Process 839 (syz-executor) thread 0xfffffe0054120000 (100158) exclusive rw vmobject (vmobject) r = 0 (0xfffffe00541144d8) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_object.c:647 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 376 5071K 517 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4213 sysctloid 34891 2055K 34966 vtbuf 24 1968K 46 kobj 331 1324K 495 newblk 55 1038K 574 vfscache 3 1025K 3 pcb 24 669K 76 inodedep 30 523K 116 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 128 270K 913 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 102 201K 218 filedesc 24 185K 113 acpica 1674 184K 54426 vmem 5 144K 6 tidhash 3 141K 3 pagedep 14 132K 41 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 109 109K 126 sem 4 106K 4 gtaskqueue 18 98K 18 bus 997 82K 5063 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 521 66K 522 ddb_capture 1 64K 1 kdtrace 201 39K 1017 umtx 304 38K 304 temp 35 37K 1852 BPF 22 36K 28 hostcache 1 32K 1 shm 1 32K 2 DEVFS3 128 32K 138 msg 4 30K 4 kbdmux 6 28K 6 DEVFS_RULE 56 20K 56 ifaddr 67 19K 69 LRO 18 19K 18 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 routetbl 135 16K 425 ithread 90 15K 90 bus-sc 34 15K 1647 eventhandler 163 14K 163 lltable 43 14K 46 ifnet 7 13K 7 ether_multi 152 13K 162 kenv 95 12K 95 GEOM 61 11K 477 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 plimit 23 9K 347 in6_multi 65 9K 65 bmsafemap 2 9K 86 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 shmfd 1 8K 1 pfs_vncache 1 8K 1 audit_evclass 239 8K 301 taskqueue 69 8K 69 cred 26 7K 204 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 kqueue 64 5K 887 ufs_dirhash 24 5K 24 UMA 266 5K 266 pf_ifnet 10 5K 19 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 pwddesc 59 4K 851 acpisem 28 4K 28 selfd 48 3K 7685 DEVFSP 46 3K 55 terminal 11 3K 11 session 22 3K 34 proc-args 86 3K 1895 acpidev 20 3K 20 lockf 23 3K 36 uidinfo 4 3K 8 hhook 8 3K 10 clone 9 3K 9 kcovinfo 36 3K 36 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 diradd 15 2K 78 ip6ndp 12 2K 13 Unitno 31 2K 50 dirrem 7 2K 60 sctp_ifa 13 2K 14 CAM XPT 22 2K 543 in_multi 6 2K 8 tun 4 2K 4 select 12 2K 31 toponodes 6 2K 6 ipsecpolicy 2 2K 2 msi 9 2K 9 netlink 2 2K 75 softdep 1 1K 1 freefile 8 1K 42 indirdep 4 1K 39 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 12 NFSD session 1 1K 1 mkdir 7 1K 60 CAM periph 4 1K 271 freework 4 1K 57 ipsec 3 1K 3 sctp_ifn 6 1K 14 newdirblk 6 1K 30 freeblks 3 1K 43 mld 6 1K 6 CC Mem 6 1K 21 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 95 pci_link 10 1K 10 crypto 4 1K 6 encap_export_host 12 1K 12 osd 11 1K 37 inpcbpolicy 18 1K 189 cdev 2 1K 2 lkpikmalloc 8 1K 9 counter_rate 14 1K 14 chacha20random 1 1K 1 biobuf 1 1K 1 ip6opt 2 1K 5 sctp_timw 1 1K 1 vnodes 1 1K 1 procdesc 2 1K 8 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 cryptodev 2 1K 40 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 ip6_msource 2 1K 3 in6_mfilter 2 1K 6 VN POLL 1 1K 1 aio 4 1K 4 pmchooks 1 1K 1 filecaps 5 1K 72 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 3336 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 33 acpiintr 1 1K 1 cpus 2 1K 2 ip6_moptions 1 1K 3 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 mqdata 0 0K 0 filemon 0 0K 1 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 11 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 11 sctp_atky 0 0K 12 sctp_atcl 0 0K 11 sctp_a_it 0 0K 11 sctp_aadr 0 0K 0 sctp_stro 0 0K 1 sctp_stri 0 0K 0 sctp_map 0 0K 2 tcp_pcm_rack 0 0K 2 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 4 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 37 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 4 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 10 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 0 in_mfilter 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 20 fadvise 0 0K 0 statfs 0 0K 184 namei_tracker 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 8 lio 0 0K 0 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 iov 0 0K 13631 ioctlops 0 0K 98 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 288 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 650 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 1 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 12527 0 254 38494208 0 mbuf 256 8612 1050 15384 0 254 2473472 0 BUF TRIE 152 225 11579 600 0 62 1794208 0 malloc-384 384 4198 32 4213 0 30 1624320 0 malloc-128 128 11497 221 14925 0 126 1499904 0 malloc-4096 4096 333 3 683 0 2 1376256 0 UMA Slabs 0 112 10911 27 10911 0 126 1225056 0 tcp_log 416 954 1593 4245 0 254 1059552 0 malloc-65536 65536 14 2 78 0 1 1048576 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 RADIX NODE 152 6293 410 27491 0 62 1018856 0 vmem btag 56 16167 144 16167 0 254 913416 0 FFS inode 1168 530 23 572 0 8 645904 0 sctp_asoc 2256 0 255 1 0 254 575280 0 socket 1024 31 477 1394 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 198 0 0 2 519552 0 VM OBJECT 248 1167 81 13646 0 62 309504 0 malloc-4096 4096 72 2 1411 0 2 303104 0 sctp_ep 1152 0 259 10 0 254 298368 0 THREAD 1860 139 13 170 0 8 282720 0 malloc-64 64 3952 395 5314 0 254 278208 0 VNODE 440 567 63 611 0 30 277200 0 malloc-2048 2048 105 23 632 0 8 262144 0 256 Bucket 2048 120 8 981 0 8 262144 0 malloc-16384 16384 11 4 54 0 1 245760 0 malloc-16 16 14382 368 14775 0 254 236000 0 DEVCTL 1024 21 199 148 0 0 225280 0 sctp_raddr 736 0 264 1 0 254 194304 0 malloc-32 32 5395 527 7002 0 254 189504 0 UMA Zones 768 238 1 238 0 16 183552 0 malloc-128 128 1176 219 25376 0 126 178560 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 11 505 1166 0 254 165120 0 malloc-32768 32768 0 5 20 0 1 163840 0 malloc-1024 1024 138 22 1147 0 16 163840 0 FFS2 dinode 256 530 100 572 0 62 161280 0 MAP ENTRY 96 1376 262 42848 0 126 157248 0 FPU_save_area 832 141 39 194 0 16 149760 0 malloc-128 128 1017 130 1027 0 126 146816 0 malloc-256 256 73 497 690 0 62 145920 0 malloc-65536 65536 0 2 110 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 mbuf_packet 256 1 507 155 0 254 130048 0 S VFS Cache 104 1002 168 1071 0 126 121680 0 ksiginfo 112 54 990 78 0 126 116928 0 malloc-32768 32768 3 0 3 0 1 98304 0 malloc-32768 32768 3 0 3 0 1 98304 0 PROC 1376 60 6 845 0 8 90816 0 UMA Kegs 384 225 8 225 0 30 89472 0 malloc-128 128 391 260 943 0 126 83328 0 filedesc0 1072 59 18 851 0 8 82544 0 malloc-16384 16384 5 0 6 0 1 81920 0 malloc-2048 2048 18 22 590 0 8 81920 0 g_bio 408 0 180 5531 0 30 73440 0 128 Bucket 1024 47 20 247 0 16 68608 0 malloc-64 64 598 473 15701 0 254 68544 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-65536 65536 0 1 8 0 1 65536 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-8192 8192 7 1 9 0 1 65536 0 malloc-4096 4096 14 2 26 0 2 65536 0 malloc-4096 4096 12 4 22 0 2 65536 0 64 Bucket 512 83 45 1644 0 30 65536 0 malloc-256 256 213 42 355 0 62 65280 0 malloc-256 256 200 55 639 0 62 65280 0 malloc-64 64 278 541 337 0 254 52416 0 malloc-64 64 465 354 724 0 254 52416 0 malloc-256 256 96 99 389 0 62 49920 0 32 Bucket 256 64 131 429 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 1 47 12812 0 16 49152 0 malloc-1024 1024 5 43 529 0 16 49152 0 malloc-384 384 88 32 435 0 30 46080 0 malloc-384 384 51 69 164 0 30 46080 0 syncache 168 0 264 3 0 254 44352 0 tcp_inpcb 1304 8 25 21 0 8 43032 0 malloc-8192 8192 4 1 5 0 1 40960 0 malloc-8192 8192 4 1 6 0 1 40960 0 malloc-8192 8192 5 0 5 0 1 40960 0 pcpu-8 8 4725 395 4895 0 254 40960 0 VMSPACE 584 39 31 826 0 16 40880 0 pipe 736 23 32 299 0 16 40480 0 da_ccb 544 0 70 1490 0 16 38080 0 udp_inpcb 408 9 81 154 0 30 36720 0 malloc-64 64 7 560 43 0 254 36288 0 malloc-64 64 54 513 7736 0 254 36288 0 malloc-64 64 257 310 1055 0 254 36288 0 malloc-64 64 19 548 279 0 254 36288 0 malloc-128 128 19 260 69 0 126 35712 0 malloc-128 128 18 261 92 0 126 35712 0 malloc-128 128 59 220 700 0 126 35712 0 malloc-128 128 25 254 377 0 126 35712 0 routing nhops 256 28 107 35 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-256 256 22 113 173 0 62 34560 0 malloc-256 256 49 86 53 0 62 34560 0 malloc-256 256 32 103 903 0 62 34560 0 malloc-256 256 39 96 586 0 62 34560 0 malloc-32768 32768 0 1 12 0 1 32768 0 malloc-32768 32768 1 0 1 0 1 32768 0 malloc-16384 16384 0 2 190 0 1 32768 0 malloc-8192 8192 2 2 103 0 1 32768 0 malloc-4096 4096 3 5 6 0 2 32768 0 malloc-2048 2048 3 13 4 0 8 32768 0 malloc-2048 2048 8 8 8 0 8 32768 0 malloc-2048 2048 1 15 76 0 8 32768 0 malloc-2048 2048 5 11 196 0 8 32768 0 malloc-2048 2048 4 12 16 0 8 32768 0 malloc-1024 1024 2 30 42 0 16 32768 0 malloc-1024 1024 1 31 5 0 16 32768 0 malloc-1024 1024 4 28 165 0 16 32768 0 malloc-1024 1024 5 27 10 0 16 32768 0 malloc-512 512 0 64 110 0 30 32768 0 malloc-512 512 9 55 9 0 30 32768 0 malloc-512 512 3 61 22 0 30 32768 0 malloc-512 512 1 63 10 0 30 32768 0 malloc-512 512 8 56 81 0 30 32768 0 pcpu-64 64 497 15 497 0 254 32768 0 ttyinq 160 135 65 300 0 62 32000 0 tcp_log_id_node 120 2 262 2 0 126 31680 0 PGRP 120 26 238 38 0 126 31680 0 clpbuf 2624 0 12 26 0 4 31488 0 sctp_laddr 48 0 588 12 0 254 28224 0 malloc-32 32 315 567 423 0 254 28224 0 16 Bucket 144 55 141 267 0 62 28224 0 4 Bucket 48 7 581 9 0 254 28224 0 AIO 208 2 131 7 0 62 27664 0 TURNSTILE 136 153 36 153 0 62 25704 0 cpuset 200 7 121 46 0 62 25600 0 malloc-4096 4096 1 5 47 0 2 24576 0 tcp_log_id_bucket 176 2 136 2 0 62 24288 0 ertt_txseginfo 40 0 606 402 0 254 24240 0 PWD 40 21 585 116 0 254 24240 0 rtentry 168 31 113 35 0 62 24192 0 Files 80 181 119 6954 0 126 24000 0 8 Bucket 80 45 255 320 0 126 24000 0 itimer 352 0 66 14 0 30 23232 0 malloc-384 384 1 59 12 0 30 23040 0 malloc-384 384 24 36 348 0 30 23040 0 ripcb 376 3 57 13 0 30 22560 0 Mountpoints 2816 2 6 2 0 4 22528 0 SLEEPQUEUE 88 153 103 153 0 126 22528 0 hostcache 64 2 313 2 0 254 20160 0 ertt 72 6 274 21 0 126 20160 0 malloc-32 32 21 609 110 0 254 20160 0 malloc-32 32 78 552 97 0 254 20160 0 malloc-32 32 141 489 883 0 254 20160 0 malloc-32 32 87 543 2893 0 254 20160 0 malloc-32 32 51 579 213 0 254 20160 0 2 Bucket 32 58 572 350 0 254 20160 0 AIOCB 552 0 35 7 0 16 19320 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-2048 2048 0 8 12 0 8 16384 0 malloc-1024 1024 12 4 12 0 16 16384 0 malloc-1024 1024 8 8 8 0 16 16384 0 malloc-512 512 3 29 13 0 30 16384 0 malloc-512 512 0 32 2 0 30 16384 0 malloc-512 512 1 31 2 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 kenv 258 17 43 1066 0 30 15480 0 tcp_rack_pcb 1088 0 14 2 0 8 15232 0 mqnode 416 3 33 3 0 30 14976 0 udplite_inpcb 408 0 36 1 0 30 14688 0 domainset 40 0 315 39 0 254 12600 0 SMR SHARED 24 8 503 8 0 254 12264 0 malloc-32 32 8 370 72 0 254 12096 0 KNOTE 160 1 74 20 0 62 12000 0 malloc-16 16 19 731 68 0 254 12000 0 malloc-16 16 29 721 74 0 254 12000 0 malloc-16 16 276 474 278 0 254 12000 0 malloc-16 16 93 657 177 0 254 12000 0 malloc-16 16 184 566 3014 0 254 12000 0 malloc-16 16 18 732 24836 0 254 12000 0 malloc-16 16 50 700 1374 0 254 12000 0 malloc-384 384 7 23 7 0 30 11520 0 malloc-384 384 11 19 11 0 30 11520 0 malloc-384 384 0 30 1 0 30 11520 0 malloc-8192 8192 0 1 26 0 1 8192 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-4096 4096 0 2 7 0 2 8192 0 malloc-4096 4096 1 1 1 0 2 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 vtnet_tx_hdr 24 0 334 932 0 254 8016 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 17 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_bbr_pcb 896 0 0 0 0 16 0 0 tcp_bbr_map 128 0 0 0 0 126 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 AIOLIO 272 0 0 0 0 30 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 L VFS Cache 320 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 cryptop 280 0 0 0 0 30 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 rl_entry 48 0 0 0 0 254 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl