last executing test programs: 1m16.635544666s ago: executing program 1 (id=773): pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r1, &(0x7f0000000340)=""/234, 0xea) writev(r0, &(0x7f0000002340)=[{&(0x7f00000004c0)="3c2e719e9fe467c83887bf0453b255ff131bf5999470b3562e087dfc1e51226d3deb834bd4fb66e4e04f8e33a0b0ba133ce23bb595064ffca711070003a34d6bfc5454c0e02704a27492e6c92413a7bbe1ca6d4828252698f4a42c14c6c333479d131e4d66ed8bc87f05a82b245d8df90b9a314035cf27e21552fee422ca1aa8a0201762262ae6117e36603843e73775a92c0cb6384bdf885d7e770bd6617cf4", 0xa0}, {&(0x7f0000001380)="6dff89ed6cea8a980f0ead6f80f9f75f28706e09209a9b0483bb8a795aa3c89393b58d2fe0817f442cbae0ddd088e057503910733fecb391d8da2ec2db6675d0c7f58d31ffd0f0462b9ca0fe64bd6e96bc3f26aee341652a1beb91f9c8f73b7e0358b9327d8524143d44bd8d5a9c0e06937f576b80d0be488b02c702d95bec831a23e10682aba27cc7669feebe1f18", 0x8f}, {&(0x7f0000001440)="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"/765, 0x79e262502ef1d89c}, {&(0x7f0000000700)="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", 0x164}, {&(0x7f0000002740)="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", 0xadb}], 0x5) rfork(0x85000) 1m16.514838279s ago: executing program 1 (id=779): r0 = msgget$private(0x0, 0x5aa) msgrcv(r0, 0x0, 0x0, 0x0, 0x800) msgsnd(r0, &(0x7f0000001040)={0x6c46ffcf4d0b1003, "6aec6ff3eedfd26499ead2c6faac9b3edc2b952e0ebb49e791fa81284c0fe02399aef6c9457481359f25b117f124f79c4bd6021d190c141fea21d28cb69f9637ae1f927b7de9999cfb2dac55598fc9a9264caf840c772723422ddcf53ab7c4318215d5189bd2293c0047d15858fcefdc80a61ef3bcb2291f079b9273b1f92afb75465669e3c27b0c388a88c7dfb66903da25f6b57623cf4aa0241f92935c06beff07769e2cc8b3ad4a179b3c27a59b268d941739820f249799c3d91dba1a2c54f6051c2c615ce9d20d472cdf1826321389c91cdd69e3b246b4"}, 0xe1, 0x0) msgrcv(r0, &(0x7f00000011c0)={0x0, ""/136}, 0x90, 0x0, 0x0) 1m16.502235848s ago: executing program 1 (id=780): setgroups(0x0, 0x0) socketpair(0x1, 0x1, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000180)=0x3, 0x4) sendto(r1, 0x0, 0x0, 0x100, 0x0, 0x0) 1m16.488029797s ago: executing program 1 (id=781): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0xa, 0x1, './file1\x00'}, 0xa) listen(r0, 0x0) rfork(0x85000) 1m16.468106198s ago: executing program 1 (id=783): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x25, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0/file0\x00', 0xe100, 0x0) 1m16.385448234s ago: executing program 1 (id=786): freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x10000, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) aio_fsync(0x80, &(0x7f0000000400)={r0, 0x8000df, 0x0, 0x0, [0x6, 0x3], 0xc, 0x8, 0xfffffff8, {0x932, 0x2, 0x0}, {0x1, 0x22, @sigval_int=0x9, @thr={0x0, 0x0}}}) 1m16.38092066s ago: executing program 32 (id=786): freebsd11_mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x10000, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) aio_fsync(0x80, &(0x7f0000000400)={r0, 0x8000df, 0x0, 0x0, [0x6, 0x3], 0xc, 0x8, 0xfffffff8, {0x932, 0x2, 0x0}, {0x1, 0x22, @sigval_int=0x9, @thr={0x0, 0x0}}}) 1m13.33641613s ago: executing program 0 (id=919): mkdir(&(0x7f00000001c0)='./file0\x00', 0x39) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x180) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x14c) renameat(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00') 1m13.26013449s ago: executing program 0 (id=925): execve(0x0, &(0x7f0000000180)=[&(0x7f0000000080)=',\x00'], 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0) 1m13.223737029s ago: executing program 0 (id=928): setgroups(0x4000000000000287, &(0x7f0000000000)=[0xffffffffffffffff]) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open(&(0x7f0000000040)='./bus\x00', 0x200, 0x1a1) 1m13.204632049s ago: executing program 0 (id=930): syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08"]) r0 = kqueue() kevent(r0, &(0x7f0000000000)=[{0x1, 0xfffffffffffffff9, 0x8005, 0x10, 0xe3f}], 0x1, 0x0, 0x0, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 1m13.186580759s ago: executing program 0 (id=932): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chflags(&(0x7f0000000080)='./file0\x00', 0x119304) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') 1m13.131597262s ago: executing program 0 (id=933): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x14000000) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @random="00000200", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x6, 0x0, @multicast2, @multicast2}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x10, 0xa7, 0x0, 0x406, {[@sack_perm={0x4, 0x2}, @generic={0x2, 0x2}, @window={0x3, 0x3, 0x1}, @nop]}}}}}}}) 1m13.131463901s ago: executing program 33 (id=933): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x14000000) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @random="00000200", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x6, 0x0, @multicast2, @multicast2}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x10, 0xa7, 0x0, 0x406, {[@sack_perm={0x4, 0x2}, @generic={0x2, 0x2}, @window={0x3, 0x3, 0x1}, @nop]}}}}}}}) 7.131470931s ago: executing program 4 (id=1850): r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0xc, &(0x7f0000000080)={0x1ff, {{0x1c, 0x1c, 0x2, 0x1000, @rand_addr="65cb30df060000000b603666ab2f3df4", 0xfffffffd}}, {{0x1c, 0x1c, 0x0, 0x0, @rand_addr="3f12c0d81c479be15ccb830030bc5ee7"}}}, 0xfc) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc030636a, 0x0) syz_emit_ethernet(0x12c20c89eb25acc4, 0x0) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0xc, &(0x7f0000000080)={0x1ff, {{0x1c, 0x1c, 0x2, 0x1000, @rand_addr="65cb30df060000000b603666ab2f3df4", 0xfffffffd}}, {{0x1c, 0x1c, 0x0, 0x0, @rand_addr="3f12c0d81c479be15ccb830030bc5ee7"}}}, 0xfc) 7.107016805s ago: executing program 4 (id=1851): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x4, 0x8, 0x0, 0x4}, {0x7, 0x0, 0x3, 0x20000001}, {0xfffe, 0x9, 0x6, 0x3}]}) fcntl$lock(r0, 0xc, &(0x7f0000000140)={0x1, 0x1, 0x1, 0xfffff05a}) r1 = open(&(0x7f0000000400)='./file0\x00', 0x1, 0x0) fcntl$lock(r1, 0xd, &(0x7f0000000140)={0x1, 0x0, 0x800000, 0x2}) fcntl$lock(r1, 0xc, &(0x7f0000000140)={0x1, 0x5, 0x1, 0x6, 0xffffffffffffffff}) 7.064180593s ago: executing program 4 (id=1852): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = open$dir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x4) renameat(r1, &(0x7f0000000480)='./file0\x00', r0, &(0x7f0000000400)='./file0\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)='./file0\x00') 6.815955878s ago: executing program 4 (id=1855): setuid(0xee01) r0 = socket$inet6_udp(0x1c, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0xffffffff, @mcast2}, 0x1c) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x2, 0x0, @empty}, 0x1c) 6.793496927s ago: executing program 4 (id=1856): mkdir(&(0x7f0000001040)='./file0\x00', 0x1) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x2000000, 0x0) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) fchflags(r0, 0x40004) mkdirat(r1, &(0x7f00000001c0)='./file1\x00', 0x0) renameat(r0, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00') 6.730053616s ago: executing program 4 (id=1859): r0 = kqueue() r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r1, 0x0) close(r0) accept(r1, 0x0, 0x0) kevent(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.72999178s ago: executing program 34 (id=1859): r0 = kqueue() r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r1, 0x0) close(r0) accept(r1, 0x0, 0x0) kevent(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.254502165s ago: executing program 5 (id=1940): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) rfork(0x85000) r0 = socket(0x1c, 0x1, 0x0) fork() wait4(0x0, 0x0, 0x2, 0x0) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00007) 2.119439912s ago: executing program 3 (id=1941): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ftruncate(r0, 0x10000) r1 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) ktrace(&(0x7f0000000140)='./file0\x00', 0x4, 0xd27d43220c7df1b, 0x0) execve(0x0, &(0x7f00000004c0)=[0x0, &(0x7f0000000340)=',\x1b\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/bpf\x00', &(0x7f0000000400)='bbr\x00'], &(0x7f0000000580)=[&(0x7f0000000500)='/dev/bpf\x00', &(0x7f0000000540)='\x00']) 2.047839667s ago: executing program 3 (id=1942): rfork(0x3060) socket(0x1c, 0x1, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x14c) chroot(&(0x7f0000000100)='./file0/file0\x00') chroot(&(0x7f0000000080)='./file0\x00') 2.047553023s ago: executing program 3 (id=1943): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r0, 0xb7c5) freebsd10_pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x40) 1.660592511s ago: executing program 6 (id=1950): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) inotify_add_watch_at(r1, r0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21000430) open$dir(&(0x7f00000002c0)='./file0\x00', 0x40000400000002c2, 0x0) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.635083491s ago: executing program 6 (id=1951): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000140)={@multicast1, @multicast2, @broadcast}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000180)={@multicast1, @multicast1, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, &(0x7f0000000200)={@multicast1, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0xc) rfork(0x85000) 1.614442434s ago: executing program 6 (id=1952): aio_waitcomplete(0x0, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0) r0 = socket(0x1c, 0x1, 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0xfffffffffffffffe}], 0x20000000000000a7}) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 1.397755866s ago: executing program 5 (id=1953): r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x1) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r1 = socket(0x1c, 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) sendmsg$inet6_sctp(r1, &(0x7f0000000480)={&(0x7f0000000180)=@in6={0x1c, 0x1c, 0x2, 0x80000000, @mcast1, 0x5}, 0x1c, 0x0}, 0x84) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) 1.397632948s ago: executing program 2 (id=1954): ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc030636a, &(0x7f00000004c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffef89, [0x0, 0x0, 0x40000]}) socket(0x17, 0x1, 0x0) setresuid(0xee01, 0xee01, 0x0) openat$evdev(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') 1.397471867s ago: executing program 2 (id=1955): r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x9, 0x4) setrlimit(0x9, &(0x7f0000000180)={0x3, 0x10}) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$unix(r0, &(0x7f0000002580)={0x0, 0x19, &(0x7f0000000100)=[{&(0x7f0000000140)="4640c719021399600f76aac84cf9aec359d5c9ce67f6453118a671000080e0c44ebc7bc3ef22bca56aa8f60468ba787ced0d999f926f54ab63ee1e", 0xfe22}], 0x1, 0x0, 0x0, 0x180}, 0x20104) 1.319950081s ago: executing program 2 (id=1956): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x108) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1900, 0x0) r0 = openat$md(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MDIOCATTACH(r0, 0xc1b46d00, &(0x7f0000000500)={0x0, 0x6, 0x2, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0xf, 0x2000000, 0x80000, 0x0, 0x0, [0x10001, 0x8, 0x0, 0x5, 0x12, 0x0, 0x5, 0x2, 0x3, 0x1001, 0x3, 0x0, 0x8, 0x80000001, 0x3, 0x0, 0x9, 0x0, 0xc32d, 0x7, 0x24d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x4, 0x401, 0x7fffffff, 0x9, 0x2, 0x194, 0x7, 0x0, 0x0, 0x1, 0xfffffffa, 0x0, 0xe585, 0x1009, 0x0, 0x0, 0x2000000, 0x3, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x200, 0xc0f, 0x4ed, 0x0, 0x81, 0x0, 0x3, 0xfffffff9, 0x800, 0xa60, 0x8, 0x4ff5, 0x0, 0xfff, 0xfffffffd, 0x0, 0xd]}) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x1) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0xff00) 1.189284639s ago: executing program 3 (id=1957): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200201, 0x50) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x80000007, 0x0}, {0x0, 0x0, @sival_int=0x200000, @ke_flags=0x9fc040a3bd859cca}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) fspacectl(r1, 0x1, &(0x7f0000000040)={0x3ff, 0x7ffffffffffffc00}, 0x0, 0x0) 1.151035804s ago: executing program 5 (id=1958): r0 = openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) freebsd11_fstatfs(r0, &(0x7f00000002c0)) socketpair(0x1, 0x1, 0x2, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$CIOCCRYPT(r1, 0x8002440a, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x8060, 0x0, 0x0, 0x0, 0x0}) 1.094729017s ago: executing program 5 (id=1959): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40000400000002c2, 0x0) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r1, 0x0) close(r0) accept(r1, 0x0, 0x0) freebsd11_fstat(r0, 0x0) 1.021158482s ago: executing program 2 (id=1960): openat$evdev(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x12, r0, 0x0) mprotect(&(0x7f000016d000/0x1000)=nil, 0x1000, 0x2) fork() 1.020943964s ago: executing program 2 (id=1961): aio_waitcomplete(0x0, 0x0) r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet6(0x1c, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2, 0xffffffff, @mcast1, 0x4}, 0x1c) ioctl$KDGETMODE(r0, 0x40046676, 0x22e00000) 756.690194ms ago: executing program 6 (id=1962): r0 = socket$inet6_udp(0x1c, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00']) writev(r1, &(0x7f0000000280), 0x26) write(r1, &(0x7f00000004c0)="9665a44f", 0x2000) rfork(0x0) 239.976748ms ago: executing program 5 (id=1963): freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000980)) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/64, 0x40}, 0x81) 172.508757ms ago: executing program 2 (id=1964): r0 = socket(0x1c, 0x1, 0x0) r1 = socket(0x1c, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x1, 0x1ff, @local={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c) setsockopt$sock_splice(r1, 0xffff, 0x1023, &(0x7f0000000080)={r1, 0x0, {0xffffffffffffff05, 0x6}}, 0x20) dup2(r1, r0) setsockopt$sock_splice(r0, 0xffff, 0x1023, &(0x7f0000000080)={r0, 0x400007, {0x9, 0x5}}, 0x20) 131.494905ms ago: executing program 6 (id=1965): mkdir(&(0x7f0000000080)='./file\x00', 0x4) r0 = openat$md(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) freebsd11_fstatfs(r0, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$CIOCCRYPT(r1, 0x8002440a, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x8060, 0x0, 0x0, 0x0, 0x0}) 125.743247ms ago: executing program 3 (id=1966): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) listen(r0, 0xb6) r1 = socket(0x1c, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setsockopt$sock_splice(r1, 0xffff, 0x1023, &(0x7f0000000080)={r0, 0x400bab8, {0x8f53969, 0x4}}, 0x14) 94.137359ms ago: executing program 3 (id=1967): r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x1) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r1 = socket(0x1c, 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) sendmsg$inet6_sctp(r1, &(0x7f0000000480)={&(0x7f0000000180)=@in6={0x1c, 0x1c, 0x2, 0x80000000, @mcast1, 0x5}, 0x1c, 0x0}, 0x84) ioctl$KDGETMODE(r2, 0x40046676, 0x22e00000) 93.418251ms ago: executing program 5 (id=1975): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300201, 0xd0) aio_write(&(0x7f00000002c0)={r0, 0x80000002, &(0x7f00000003c0)="1f9a", 0x2, [], 0x0, 0x0, 0x0, {0x1, 0x7, 0x0}, {0x0, 0x4, @sival_ptr=0x200002, @spare=[0x5482, 0x1, 0x8, 0x8, 0x1, 0x0, 0xe3, 0x3]}}) mlockall(0x2) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000104000/0x800000)=nil, 0x800000, 0x3, 0x20011, r1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 0s ago: executing program 6 (id=1968): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) ktimer_create(0x0, 0x0, &(0x7f00000003c0)=0x0) ktimer_settime(r1, 0x0, &(0x7f0000000100)={{0x1066}, {0x0, 0x3ff}}, 0x0) rfork(0x1000) lio_listio(0x0, 0x0, 0x0, &(0x7f0000002c00)={0x1, 0x13, @sigval_int=0x5, @ke_flags=0x8018}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. Out of ktrace request objects. if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a45000 md2147483519: truncating fractional last sector by 3 bytes ip6_pcbopts: all specified options are cleared. md0: truncating fractional last sector by 249 bytes lock order reversal: (sleepable after non-sleepable) 1st 0xfffffe0058125688 tun_mtx (tun_mtx, sleep mutex) @ /syzkaller/managers/i386/kernel/sys/net/if_tuntap.c:1688 2nd 0xffffffff83ccda40 tun_ioctl (tun_ioctl, sx) @ /syzkaller/managers/i386/kernel/sys/net/if_tuntap.c:1387 lock order tun_ioctl -> tun_mtx established at: #0 0xffffffff81683451 at witness_checkorder+0x781 #1 0xffffffff81508437 at __mtx_lock_flags+0x187 #2 0xffffffff8186d5ac at tunifioctl+0x15c #3 0xffffffff818487de at ifhwioctl+0xefe #4 0xffffffff8184c9d2 at ifioctl+0xde2 #5 0xffffffff816921da at kern_ioctl+0x4ca #6 0xffffffff81691c1e at sys_ioctl+0x36e #7 0xffffffff821688b2 at amd64_syscall+0x4e2 #8 0xffffffff8210d29b at fast_syscall_common+0xf8 lock order tun_mtx -> tun_ioctl attempted at: #0 0xffffffff81684322 at witness_checkorder+0x1652 #1 0xffffffff815720f9 at _sx_xlock+0x139 #2 0xffffffff8186d4da at tunifioctl+0x8a #3 0xffffffff8184968b at ifhwioctl+0x1dab #4 0xffffffff8186af42 at tunioctl+0xd92 #5 0xffffffff811df426 at devfs_ioctl+0x266 #6 0xffffffff8232ae97 at VOP_IOCTL_APV+0x87 #7 0xffffffff817efb67 at vn_ioctl+0x3c7 #8 0xffffffff811e02e9 at devfs_ioctl_f+0x69 #9 0xffffffff816921da at kern_ioctl+0x4ca #10 0xffffffff81691c1e at sys_ioctl+0x36e #11 0xffffffff80442dd7 at freebsd32_ioctl+0x607 #12 0xffffffff822f2dc2 at ia32_syscall+0x4d2 #13 0xffffffff8210daff at int0x80_syscall_common+0x9c Expensive callout(9) function: 0xffffffff814966b0(0xfffffe0071203a00) 0.002063784 s if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 Sep 26 09:37:41 ci-freebsd-i386-4 dhclient[1461]: Can't find free bpf: No such file or directory Sep 26 09:37:41 ci-freebsd-i386-4 dhclient[1461]: exiting. Sep 26 09:37:42 ci-freebsd-i386-4 dhclient[1507]: Can't find free bpf: No such file or directory Sep 26 09:37:42 ci-freebsd-i386-4 dhclient[1507]: exiting. Sep 26 09:37:43 ci-freebsd-i386-4 dhclient[1549]: Can't find free bpf: No such file or directory Sep 26 09:37:43 ci-freebsd-i386-4 dhclient[1549]: exiting. Sep 26 09:37:43 ci-freebsd-i386-4 dhclient[1585]: Can't find free bpf: No such file or directory Sep 26 09:37:43 ci-freebsd-i386-4 dhclient[1585]: exiting. if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a45800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 ip6_pcbopts: all specified options are cleared. if_delmulti_locked: detaching ifnet instance 0xfffffe0007a45000 Sep 26 09:37:51 ci-freebsd-i386-4 dhclient[1850]: Can't find free bpf: No such file or directory Sep 26 09:37:51 ci-freebsd-i386-4 dhclient[1850]: exiting. if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a45000 Sep 26 09:37:55 ci-freebsd-i386-4 dhclient[2042]: Can't find free bpf: No such file or directory Sep 26 09:37:55 ci-freebsd-i386-4 dhclient[2042]: exiting. if_delmulti_locked: detaching ifnet instance 0xfffffe0007a44000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a44000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a44800 Expensive callout(9) function: 0xffffffff81a5ec10(0xfffffe007acbc540) 0.002889717 s vnode_pager_putpages: zero-length write at 0 resid 2002 0xfffffe007aa00a50: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371c140 usecount 2, writecount 2, refcount 3 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe00541d16c8 ref 1 pages 1 cleanbuf 1 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe00541b1780 (pid 2515, syz-executor, tid 101940) nlink=1, effnlink=1, size=2002, extsize 0 generation=6c6dd18e, uid=0, gid=0, flags=0x4 ino 198658, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0007a45800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a45000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a44000 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0007a46800 if_delmulti_locked: detaching ifnet instance 0xfffffe0058575000 Jan 1 00:03:48 ci-freebsd-i386-4 dhclient[3057]: Can't find free bpf: No such file or directory Jan 1 00:03:48 ci-freebsd-i386-4 dhclient[3057]: exiting. vnode_pager_putpages: zero-length write at 0 resid 8192 0xfffffe007134f528: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371c140 usecount 3, writecount 2, refcount 4 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe0080405c98 ref 1 pages 9 cleanbuf 2 dirtybuf 0 lock type ufs: EXCL by thread 0xfffffe00541ff000 (pid 3136, syz-executor, tid 102763) nlink=1, effnlink=1, size=67538, extsize 0 generation=c7f33d17, uid=0, gid=0, flags=0x160000 ino 115, on dev gpt/rootfs panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:607: callout_cc_add: Bad list head 0xfffffe0007794a40 first->prev != head cpuid = 0 time = 234 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056a7d750 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056a7d8b0 vpanic() at vpanic+0x257/frame 0xfffffe0056a7da70 panic() at panic+0xb5/frame 0xfffffe0056a7db30 callout_cc_add() at callout_cc_add+0x339/frame 0xfffffe0056a7db90 callout_reset_sbt_on() at callout_reset_sbt_on+0x74f/frame 0xfffffe0056a7dcb0 logtimeout() at logtimeout+0x158/frame 0xfffffe0056a7dcd0 softclock_call_cc() at softclock_call_cc+0x422/frame 0xfffffe0056a7de80 softclock_thread() at softclock_thread+0x200/frame 0xfffffe0056a7def0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056a7df30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056a7df30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 2 tid 100031 ] Stopped at kdb_enter+0x6e: movq $0,0x259e887(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff82809a20 .str.27 rsp 0xfffffe0056a7d890 rbp 0xfffffe0056a7d8b0 rsi 0 rdi 0xffffffff81644bb9 printf+0x149 r8 0 r9 0xffffffff r10 0x129ad7afb100723d r11 0x2 r12 0xfffffe000781a780 r13 0xfffffffffffffffe r14 0xffffffff82809a20 .str.27 r15 0 rip 0xffffffff8162e30e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x259e887(%rip) db> show proc Process 2 (clock) at 0xfffffe0007808008: state: NORMAL uid: 0 gid: 0 supp gids: 0 parent: pid 0 at 0xffffffff83b57080 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b57080 reapsubtree: 2 sigparent: 20 vmspace: 0xffffffff83b58060 (map 0xffffffff83b58060) (map.pmap 0xffffffff83b58100) (pmap 0xffffffff83b58170) threads: 2 100031 Run CPU 0 [clock (0)] 100032 I [clock (1)] db> ps pid ppid pgrp uid state wmesg wchan cmd 3183 3026 3026 0 R (threaded) syz-executor 101691 RunQ syz-executor 102818 RunQ syz-executor 3182 1997 1997 0 R (threaded) syz-executor 102575 RunQ syz-executor 102816 Run CPU 1 syz-executor 3180 766 766 0 R (threaded) syz-executor 101931 RunQ syz-executor 102814 RunQ syz-executor 102817 S uwait 0xfffffe007b05d700 syz-executor 3178 765 765 0 R (threaded) syz-executor 102600 RunQ syz-executor 102811 S connec 0xfffffe006eb2d4da syz-executor 102813 S uwait 0xfffffe007b05cd00 syz-executor 3174 1 765 0 S uwait 0xfffffe0071292680 syz-executor 3169 0 0 0 DL mdwait 0xfffffe007acf2000 [md2] 3161 1 765 0 S uwait 0xfffffe007acc5300 syz-executor 3154 1 3026 0 S uwait 0xfffffe007b05e080 syz-executor 3153 1 3026 0 S uwait 0xfffffe007acc5980 syz-executor 3148 1 1997 0 S uwait 0xfffffe007b05d200 syz-executor 3140 1 3026 0 S uwait 0xfffffe007b05e580 syz-executor 3131 1 765 0 S uwait 0xfffffe007acc4980 syz-executor 3116 1 3026 0 S uwait 0xfffffe007acc4680 syz-executor 3104 1 766 0 S uwait 0xfffffe007b05ea80 syz-executor 3102 1 765 0 S uwait 0xfffffe007b05ee00 syz-executor 3101 1 765 0 S uwait 0xfffffe007b05d000 syz-executor 3070 1 1997 0 SV uwait 0xfffffe007b05e000 syz-executor 3026 762 3026 0 R syz-executor 2984 1 1812 0 S uwait 0xfffffe007acc4c80 syz-executor 2971 1 1997 0 S uwait 0xfffffe007b05e600 syz-executor 2960 1 766 0 S uwait 0xfffffe007b05cd80 syz-executor 2936 1 1997 0 S uwait 0xfffffe0057d91e00 syz-executor 2931 1 765 0 S uwait 0xfffffe0057d94880 syz-executor 2904 1 765 0 S uwait 0xfffffe007acc5a80 syz-executor 2896 1 1997 0 S uwait 0xfffffe0057d92180 syz-executor 2860 1 1997 0 S uwait 0xfffffe007acc4780 syz-executor 2842 1 1812 0 S uwait 0xfffffe007b05dc80 syz-executor 2812 1 766 0 S uwait 0xfffffe007acc5880 syz-executor 2800 1 766 0 S uwait 0xfffffe0071295500 syz-executor 2776 1 765 0 S uwait 0xfffffe007acc6780 syz-executor 2763 1 1997 0 S uwait 0xfffffe007b05ec80 syz-executor 2728 1 766 0 S uwait 0xfffffe007acc5c80 syz-executor 2722 1 765 0 S uwait 0xfffffe0057d01580 syz-executor 2720 1 765 0 S uwait 0xfffffe007aa92f00 syz-executor 2709 1 765 0 S uwait 0xfffffe007acc4b00 syz-executor 2688 1 1997 0 S uwait 0xfffffe007acc4800 syz-executor 2671 1 1812 0 S uwait 0xfffffe0057d01d80 syz-executor 2666 1 1997 0 S uwait 0xfffffe007acc5280 syz-executor 2649 1 1812 0 S uwait 0xfffffe007acc4180 syz-executor 2619 1 765 0 S uwait 0xfffffe007acc6680 syz-executor 2600 2598 765 60929 T uwait 0xfffffe0071295300 syz-executor 2598 1 765 60929 SV uwait 0xfffffe007aa92e80 syz-executor 2566 1 766 0 S uwait 0xfffffe0071295000 syz-executor 2527 1 766 0 S uwait 0xfffffe007acc4000 syz-executor 2526 1 766 0 S uwait 0xfffffe007acc6480 syz-executor 2495 1 1997 0 S uwait 0xfffffe007acc5780 syz-executor 2441 1 1812 0 S umtxn 0xfffffe007b05f600 syz-executor 2400 1 1812 0 S uwait 0xfffffe007acc4900 syz-executor 2386 1 1812 0 S uwait 0xfffffe007acc6280 syz-executor 2375 1 766 0 S uwait 0xfffffe007b05f500 syz-executor 2368 1 766 0 S uwait 0xfffffe007b05f100 syz-executor 2330 1 765 0 S uwait 0xfffffe0057d94980 syz-executor 2326 2325 766 0 S uwait 0xfffffe007aa92b00 syz-executor 2325 1 766 0 SV wait 0xfffffe00541b6ab0 syz-executor 2310 1 766 0 S uwait 0xfffffe007acc4500 syz-executor 2293 1 1812 0 S uwait 0xfffffe007b05f580 syz-executor 2284 1 1997 0 SV uwait 0xfffffe0071293880 syz-executor 2280 1 766 0 S uwait 0xfffffe007acc5b80 syz-executor 2279 1 1997 0 S uwait 0xfffffe0057d91400 syz-executor 2268 1 1997 0 S uwait 0xfffffe0071292080 syz-executor 2221 1 765 0 S uwait 0xfffffe007acc4700 syz-executor 2208 1 765 0 T umtxn 0xfffffe007acc4200 syz-executor 2207 1 765 0 S uwait 0xfffffe007acc4600 syz-executor 2201 1 2200 0 S uwait 0xfffffe0071294a80 syz-executor 2184 1 766 0 S uwait 0xfffffe007acc7200 syz-executor 2121 1 1997 0 S uwait 0xfffffe0071293980 syz-executor 2117 1 766 0 S uwait 0xfffffe007acc6580 syz-executor 2115 1 1997 0 S uwait 0xfffffe007aa92e00 syz-executor 1997 762 1997 0 R syz-executor 1962 1 763 0 S uwait 0xfffffe0071292580 syz-executor 1935 1 763 0 S uwait 0xfffffe00584ecd00 syz-executor 1933 1 763 0 S uwait 0xfffffe007acc5c00 syz-executor 1914 1 765 0 S uwait 0xfffffe0071292280 syz-executor 1910 1 765 60928 S uwait 0xfffffe007acc6e80 syz-executor 1907 1 766 60928 S uwait 0xfffffe0071293680 syz-executor 1899 1 766 0 S uwait 0xfffffe0057d94b80 syz-executor 1860 1 765 0 S uwait 0xfffffe007acc6380 syz-executor 1816 1 766 60928 S uwait 0xfffffe0071293a80 syz-executor 1772 1 763 0 SV aiowc 0xfffffe00541703a0 syz-executor 1763 1 763 0 S uwait 0xfffffe007acc6d80 syz-executor 1747 1 1745 0 S uwait 0xfffffe0071292780 syz-executor 1711 1 765 0 SV uwait 0xfffffe0057d94600 syz-executor 1699 0 0 0 DL mdwait 0xfffffe006eb75000 [md1] 1695 1 764 0 S uwait 0xfffffe007acc7100 syz-executor 1687 1 765 0 S umtxn 0xfffffe0071293780 syz-executor 1671 1 1671 0 S uwait 0xfffffe00584e9c00 syz-executor 1656 1 766 0 S uwait 0xfffffe007acc7000 syz-executor 1651 1 763 0 SV sigwait 0xfffffe005400d620 syz-executor 1614 1 764 0 S uwait 0xfffffe0071293380 syz-executor 1528 1 763 -1 S uwait 0xfffffe0071292a80 syz-executor 1521 1 764 0 S uwait 0xfffffe0071294b80 syz-executor 1427 1 764 0 S uwait 0xfffffe00584ece00 syz-executor 1420 1 766 0 SV sigwait 0xfffffe0054151b60 syz-executor 1403 1 765 0 T uwait 0xfffffe00584ecb00 syz-executor 1374 1 766 0 SV sigwait 0xfffffe0054186610 syz-executor 1339 1 766 0 S uwait 0xfffffe00584ecf00 syz-executor 1309 1 765 0 SV sigwait 0xfffffe0054153618 syz-executor 1298 1 764 0 SV uwait 0xfffffe0071293d00 syz-executor 1283 1 765 0 SV sigwait 0xfffffe00541390b0 syz-executor 1277 1 764 0 S uwait 0xfffffe00584ea500 syz-executor 1263 1 766 0 S uwait 0xfffffe0057d94500 syz-executor 1259 1 764 0 S uwait 0xfffffe007acc6b80 syz-executor 1238 1 765 60928 S uwait 0xfffffe007acc6180 syz-executor 1231 1 764 0 S uwait 0xfffffe0071295100 syz-executor 1185 1 765 0 S uwait 0xfffffe00584ea080 syz-executor 1171 1 764 0 S uwait 0xfffffe007acc6c80 syz-executor 1165 0 0 0 DL (threaded) [so_splice] 100428 D - 0xfffffe0007786e80 [thr_0] 100458 D - 0xfffffe0007786ec0 [thr_1] 1133 1 764 0 S uwait 0xfffffe00584ea380 syz-executor 1106 0 0 0 DL mdwait 0xfffffe006eb76000 [md0] 1074 0 0 0 DL mdwait 0xfffffe0058635000 [md2147483519] 1035 1 765 0 S uwait 0xfffffe00584ecc00 syz-executor 1027 1 763 0 S uwait 0xfffffe0057d94e80 syz-executor 1018 1 764 60929 S uwait 0xfffffe0071292b80 syz-executor 1015 1 765 0 T uwait 0xfffffe0057d94c80 syz-executor 968 1 766 0 T syz-executor 955 1 765 0 T syz-executor 952 0 0 0 DL - 0xffffffff83cbde00 [soaiod4] 951 0 0 0 DL - 0xffffffff83cbde00 [soaiod3] 949 0 0 0 DL - 0xffffffff83cbde00 [soaiod2] 948 0 0 0 DL - 0xffffffff83cbde00 [soaiod1] 942 1 766 60929 S uwait 0xfffffe00584e9e00 syz-executor 938 1 765 0 S uwait 0xfffffe00584eb380 syz-executor 903 1 763 60928 S uwait 0xfffffe0071293180 syz-executor 866 1 764 0 S uwait 0xfffffe00584e9d00 syz-executor 817 0 0 0 DL aiordy 0xfffffe005413b010 [aiod4] 816 0 0 0 DL aiordy 0xfffffe005413b568 [aiod3] 815 0 0 0 DL aiordy 0xfffffe005413bac0 [aiod2] 814 0 0 0 DL aiordy 0xfffffe0054124018 [aiod1] 766 762 766 0 R syz-executor 765 762 765 0 R syz-executor 762 760 760 0 S select 0xfffffe0057df7940 syz-executor 760 758 760 0 Ss sigsusp 0xfffffe0054121608 csh 758 681 758 0 Ss select 0xfffffe0057de09c0 sshd 747 1 747 0 Ss+ ttyin 0xfffffe0058279cb0 getty 746 1 746 0 Ss+ ttyin 0xfffffe005862f0b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe005862f4b0 getty 744 1 744 0 Ss+ ttyin 0xfffffe005862f8b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe005862fcb0 getty 742 1 742 0 Ss+ ttyin 0xfffffe00586300b0 getty 741 1 741 0 Ss+ ttyin 0xfffffe00586304b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe00586308b0 getty 739 1 739 0 Ss+ ttyin 0xfffffe0058630cb0 getty 685 1 685 0 Ss nanslp 0xffffffff83badc41 cron 681 1 681 0 Ss select 0xfffffe0057ddbd40 sshd 494 1 494 0 Ss select 0xfffffe0057ddbdc0 syslogd 423 1 423 0 Ss select 0xfffffe0057ddbf40 devd 422 1 422 65 Ss select 0xfffffe0058613640 dhclient 337 1 337 0 Ss select 0xfffffe0057de0140 dhclient 334 1 334 0 Ss select 0xfffffe00586136c0 dhclient 16 0 0 0 DL syncer 0xffffffff83ccb820 [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cc9d60 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100094 D sdflush 0xfffffe005862dce8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d14cc0 [vmdaemon] 8 0 0 0 RL (threaded) [pagedaemon] 100077 RunQ [dom0] 100083 D launds 0xffffffff83cfad94 [laundry: dom0] 100084 D umarcl 0xffffffff81e148e0 [uma] 7 0 0 0 DL - 0xffffffff839265d8 [rand_harvestq] 6 0 0 0 TL pftm 0xffffffff843b9f20 [pf purge] 5 0 0 0 DL waiting 0xffffffff84822700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838f0340 [doneq0] 100046 D - 0xffffffff838f02c0 [async] 100075 D - 0xffffffff838f0140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cf6660 [crypto] 100043 D crypto_ 0xfffffe0053ee4d30 [crypto returns 0] 100044 D crypto_ 0xfffffe0053ee4d80 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b56640 [g_event] 100038 D - 0xffffffff83b56660 [g_up] 100039 D - 0xffffffff83b56680 [g_down] 2 0 0 0 RL (threaded) [clock] 100031 Run CPU 0 [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83cf7100 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c53ff0 [swapper] 100005 D - 0xfffffe0053ea0100 [softirq_0] 100006 D - 0xfffffe0053ea0000 [softirq_1] 100007 D - 0xfffffe0053e9fe00 [if_io_tqg_0] 100008 D - 0xfffffe0053e9fd00 [if_io_tqg_1] 100009 D - 0xfffffe0053e9fc00 [if_config_tqg_0] 100010 D - 0xfffffe000776ea00 [kqueue_ctx taskq] 100011 D - 0xfffffe000776e900 [jail_remove taskq] 100012 D - 0xfffffe000776e800 [bus taskq] 100015 D - 0xfffffe000776e500 [thread taskq] 100017 D - 0xfffffe000776e300 [aiod_kick taskq] 100018 D - 0xfffffe000776e200 [deferred_unmount ta] 100019 D - 0xfffffe000776e100 [inm_free taskq] 100020 D - 0xfffffe000776e000 [in6m_free taskq] 100021 D - 0xfffffe000776de00 [linuxkpi_irq_wq] 100022 D - 0xfffffe000776dd00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe000776dd00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe000776dd00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe000776dd00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe000776dc00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe000776dc00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe000776dc00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe000776dc00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe000776da00 [firmware taskq] 100040 D - 0xfffffe000776d900 [crypto_0] 100041 D - 0xfffffe000776d900 [crypto_1] 100056 D - 0xfffffe0057de6d00 [vtnet0 rxq 0] 100057 D - 0xfffffe0057de6c00 [vtnet0 txq 0] 100058 D - 0xfffffe0057de6b00 [vtnet0 rxq 1] 100059 D - 0xfffffe0057de6a00 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057de0380 [virtio_balloon] 100065 D - 0xffffffff8280e101 [deadlkres] 100069 D - 0xfffffe00593fd500 [acpi_task_0] 100070 D - 0xfffffe00593fd500 [acpi_task_1] 100071 D - 0xfffffe00593fd500 [acpi_task_2] 100073 D - 0xfffffe000776eb00 [mca taskq] 100074 D - 0xfffffe000776d700 [CAM taskq] 100076 D - 0xfffffe0007770500 [ipsec_offload] db> show all locks Process 3183 (syz-executor) thread 0xfffffe00541da000 (102818) exclusive rw SUrw (SUrw) r = 0 (0xfffffe005862dc00) locked @ /syzkaller/managers/i386/kernel/sys/ufs/ffs/ffs_softdep.c:10246 exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007de62d8) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_bio.c:4022 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe007fde2750) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_vnops.c:1313 Process 3182 (syz-executor) thread 0xfffffe00541f4000 (102816) shared rw vmobject (vmobject) r = 0 (0xfffffe008040dc98) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_fault.c:1974 shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe005416c2a8) locked @ /syzkaller/managers/i386/kernel/sys/vm/vm_map.c:4998 Process 3180 (syz-executor) thread 0xfffffe00541ff780 (102814) exclusive lockmgr bufwait (bufwait) r = 0 (0xfffffe0007ec3ed0) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_bio.c:1752 exclusive lockmgr ufs (ufs) r = 0 (0xfffffe007ff1e070) locked @ /syzkaller/managers/i386/kernel/sys/kern/vfs_vnops.c:1313 Process 2 (clock) thread 0xfffffe000781a780 (100031) exclusive sleep mutex msgbuf lock (msgbuf lock) r = 0 (0xffffffff83bccf60) locked @ /syzkaller/managers/i386/kernel/sys/kern/kern_mutex.c:213 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 403 5218K 529 tcp_hpts 7 4801K 7 devbuf 4187 4324K 4220 sysctloid 35359 2083K 35434 vtbuf 24 1968K 46 filedesc 226 1804K 4306 kobj 331 1324K 540 newblk 79 1044K 8936 vfscache 3 1025K 3 subproc 349 732K 3372 pcb 36 679K 359 inodedep 58 534K 3000 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 vmem 5 276K 9 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 101 201K 1078680 acpica 1674 184K 54444 tidhash 3 141K 3 pagedep 25 134K 2183 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 113 113K 136 sem 4 106K 4 gtaskqueue 18 98K 18 bus 1000 82K 5086 mtx_pool 3 74K 3 kdtrace 410 72K 6007 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 524 66K 524 umtx 512 64K 512 ddb_capture 1 64K 1 LRO 42 43K 42 shm 2 34K 10 DEVFS3 132 33K 142 hostcache 1 32K 1 msg 4 30K 4 kbdmux 6 28K 6 ifaddr 100 27K 102 routetbl 226 22K 640 lltable 68 21K 89 temp 44 21K 3184 DEVFS_RULE 57 20K 57 ether_multi 238 19K 377 BPF 17 19K 23 ifnet 10 19K 11 cred 45 17K 409 ufs_mount 4 17K 5 proc 3 17K 3 md_disk 5 17K 13 filemon 2 16K 13 tty 16 16K 16 shmfd 19 16K 53 ithread 90 15K 90 bus-sc 34 15K 1657 GEOM 69 15K 566 eventhandler 163 14K 163 in6_multi 95 13K 104 kenv 95 12K 95 plimit 30 12K 479 kqueue 171 11K 3451 pwddesc 166 11K 3295 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 bmsafemap 2 9K 3001 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 10 pfs_vncache 1 8K 1 dirrem 30 8K 2776 audit_evclass 240 8K 306 taskqueue 69 8K 132 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 freework 22 6K 4040 pf_ifnet 13 5K 31 DEVFSP 78 5K 164 ufs_dirhash 24 5K 24 UMA 270 5K 270 sctp_timw 17 5K 17 vt 11 5K 11 sctp_stro 4 4K 27 memdesc 1 4K 1 MCA 32 4K 32 md_sectors 1 4K 1 evdev 4 4K 4 kcovinfo 63 4K 63 proc-args 180 4K 4642 acpisem 28 4K 28 sctp_atcl 9 4K 127 freefile 24 3K 2582 ip6ndp 18 3K 20 selfd 44 3K 277729 terminal 11 3K 11 tun 7 3K 7 uidinfo 6 3K 13 lockf 24 3K 641 in_multi 10 3K 32 session 20 3K 55 acpidev 20 3K 20 sctp_ifa 19 3K 20 hhook 8 3K 10 newdirblk 18 3K 2117 clone 9 3K 10 netlink 2 3K 151 local_apic 1 2K 1 io_apic 1 2K 1 freeblks 8 2K 2375 ipsec-saq 2 2K 2 CC Mem 16 2K 548 Unitno 29 2K 96 CAM XPT 22 2K 543 mkdir 12 2K 4234 nhops 6 2K 10 toponodes 6 2K 6 diradd 11 2K 2806 ipsecpolicy 2 2K 2 indirdep 5 2K 2387 sctp_ifn 9 2K 20 msi 9 2K 9 mld 9 2K 9 igmp 9 2K 9 select 9 2K 187 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 vnodemarker 2 1K 44 NFSD session 1 1K 1 CAM periph 4 1K 271 inpcbpolicy 25 1K 1112 osd 21 1K 568 ipsec 3 1K 3 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 1324 pci_link 10 1K 10 ip_msource 11 1K 44 crypto 4 1K 64 encap_export_host 12 1K 12 sctp_atky 13 1K 169 sctp_stri 1 1K 24 cdev 2 1K 2 lkpikmalloc 8 1K 9 filedesc_to_leader 7 1K 15 counter_rate 13 1K 13 sctp_aadr 6 1K 7 frag6 4 1K 11 chacha20random 1 1K 1 biobuf 1 1K 1 iov 6 1K 33237 ip6opt 2 1K 135 cryptodev 4 1K 219 vnodes 1 1K 28 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 sigio 3 1K 10 sctp_athm 9 1K 139 soname 5 1K 4315 sctp_map 8 1K 52 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 10 procdesc 1 1K 24 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 sctp_vrf 1 1K 1 ip_moptions 1 1K 43 in_mfilter 1 1K 98 vnet 1 1K 1 accf 1 1K 1 pmc 1 1K 1 entropy 2 1K 36 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 pf 1 1K 5 p1003.1b 1 1K 1 filecaps 1 1K 139 tcp_pcm_rack 0 0K 24 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 48 sctp_mcore 0 0K 0 sctp_socko 0 0K 21 sctp_iter 0 0K 16 sctp_mvrf 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 16 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 mqdata 0 0K 0 pf_table 0 0K 3 pf_rule 0 0K 5 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 973 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 20 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 330 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6_msource 0 0K 0 ip6_moptions 0 0K 13 in6_mfilter 0 0K 10 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 21 fadvise 0 0K 0 VN POLL 0 0K 74 statfs 0 0K 222 namei_tracker 0 0K 21 inotify 0 0K 100 export_host 0 0K 0 cl_savebuf 0 0K 139 lio 0 0K 68 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 3 pts 0 0K 0 timerfd 0 0K 0 ioctlops 0 0K 151 eventfd 0 0K 17 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 332 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 930 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 1 rctl 0 0K 0 cache 0 0K 0 jaildesc 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 102 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 ufshci 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 6 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8322 1076 78031 0 254 38494208 0 tcp_log 416 5247 5427 35667 0 254 4440384 0 mbuf 256 8751 912 125232 0 254 2473728 0 RADIX NODE 152 14479 180 94288 0 62 2228168 0 malloc-16384 16384 112 3 2147 0 1 1884160 0 BUF TRIE 152 411 11393 6412 0 62 1794208 0 malloc-384 384 4145 55 4175 0 30 1612800 0 mbuf_cluster 2048 762 0 762 0 254 1560576 0 malloc-128 128 11628 90 11644 0 126 1499904 0 malloc-4096 4096 334 6 1895 0 2 1392640 0 UMA Slabs 0 112 11461 17 11461 0 126 1285536 0 sctp_asoc 2256 4 506 26 0 254 1150560 0 vmem btag 56 18973 74 18973 0 254 1066632 0 malloc-64 64 722 15847 1190525 0 254 1060416 0 malloc-65536 65536 14 2 24 0 1 1048576 0 FFS inode 1168 662 24 3296 0 8 801248 0 malloc-4096 4096 172 4 3183 0 2 720896 0 VM OBJECT 248 2390 90 43852 0 62 615040 0 pbuf 2624 0 233 0 0 2 611392 0 sctp_ep 1152 4 507 89 0 254 588672 0 256 Bucket 2048 244 22 2167 0 8 544768 0 socket 1024 38 470 2811 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 THREAD 1860 243 13 2818 0 8 476160 0 MAP ENTRY 96 4295 241 131555 0 126 435456 0 sctp_raddr 736 4 513 26 0 254 380512 0 VNODE 440 705 78 3341 0 30 344520 0 malloc-65536 65536 0 5 165 0 1 327680 0 malloc-2048 2048 111 17 508 0 8 262144 0 malloc-64 64 3894 201 3988 0 254 262080 0 PROC 1368 165 11 3187 0 8 240768 0 malloc-16 16 14571 429 14704 0 254 240000 0 FPU_save_area 832 245 34 4829 0 16 232128 0 DEVCTL 1024 0 220 181 0 0 225280 0 filedesc0 1072 166 23 3295 0 8 202608 0 malloc-32768 32768 0 6 2154 0 1 196608 0 mbuf_packet 256 3 759 1686 0 254 195072 0 FFS2 dinode 256 662 88 3296 0 62 192000 0 UMA Zones 768 242 2 242 0 16 187392 0 malloc-32 32 5355 315 5458 0 254 181440 0 malloc-2048 2048 7 81 1057 0 8 180224 0 malloc-128 128 1232 163 27465 0 126 178560 0 malloc-256 256 166 524 9331 0 62 176640 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 12 504 1532 0 254 165120 0 malloc-128 128 957 314 9086 0 126 162688 0 malloc-1024 1024 130 14 3455 0 16 147456 0 S VFS Cache 104 1008 396 3746 0 126 146016 0 malloc-65536 65536 0 2 110 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 1 1 9 0 1 131072 0 malloc-32768 32768 2 2 17 0 1 131072 0 malloc-32768 32768 0 4 79 0 1 131072 0 ksiginfo 112 167 877 410 0 126 116928 0 pf anchors 1664 0 70 1 0 64 116480 0 malloc-384 384 119 181 3578 0 30 115200 0 malloc-128 128 642 257 6669 0 126 115072 0 malloc-16384 16384 6 1 9 0 1 114688 0 malloc-8192 8192 10 3 23 0 1 106496 0 VMSPACE 584 137 45 3130 0 16 106288 0 ertt_txseginfo 40 0 2626 13015 0 254 105040 0 128 Bucket 1024 69 30 357 0 16 101376 0 malloc-32768 32768 3 0 3 0 1 98304 0 g_bio 408 0 240 42036 0 30 97920 0 malloc-256 256 200 175 6251 0 62 96000 0 malloc-256 256 293 82 2963 0 62 96000 0 malloc-8192 8192 9 2 103 0 1 90112 0 malloc-4096 4096 17 5 288 0 2 90112 0 UMA Kegs 384 229 4 229 0 30 89472 0 syncache 168 0 528 20 0 254 88704 0 64 Bucket 512 98 62 9752 0 30 81920 0 malloc-384 384 183 27 183 0 30 80640 0 malloc-256 256 170 145 3421 0 62 80640 0 sctp_readq 152 0 520 7 0 254 79040 0 sctp_chunk 152 4 516 134 0 254 79040 0 malloc-64 64 958 113 5342 0 254 68544 0 tcp_bbr_map 128 0 527 957 0 126 67456 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-2048 2048 13 19 152 0 8 65536 0 malloc-2048 2048 21 11 52 0 8 65536 0 malloc-1024 1024 26 38 558 0 16 65536 0 32 Bucket 256 93 162 2560 0 62 65280 0 sctp_stream_msg_out 112 0 540 8 0 254 60480 0 malloc-4096 4096 14 0 497 0 2 57344 0 tcp_inpcb 1304 17 25 548 0 8 54768 0 malloc-64 64 340 479 3882 0 254 52416 0 malloc-128 128 30 373 2966 0 126 51584 0 malloc-256 256 30 165 6418 0 62 49920 0 malloc-256 256 57 138 3414 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 0 48 27079 0 16 49152 0 malloc-16384 16384 1 2 191 0 1 49152 0 malloc-2048 2048 11 13 12 0 8 49152 0 malloc-1024 1024 17 31 1481 0 16 49152 0 malloc-384 384 87 33 118 0 30 46080 0 da_ccb 544 0 84 10645 0 16 45696 0 pcpu-8 8 5161 471 5553 0 254 45056 0 TURNSTILE 136 257 58 257 0 62 42840 0 vnpbuf 2624 0 16 1 0 16 41984 0 malloc-4096 4096 7 3 94 0 2 40960 0 pipe 736 21 34 543 0 16 40480 0 udp_inpcb 408 6 84 389 0 30 36720 0 malloc-64 64 24 543 32447 0 254 36288 0 malloc-64 64 33 534 107 0 254 36288 0 malloc-64 64 175 392 3299 0 254 36288 0 malloc-64 64 3 564 4 0 254 36288 0 16 Bucket 144 67 185 883 0 62 36288 0 tcp_rack_map 128 0 279 67 0 126 35712 0 malloc-128 128 26 253 259 0 126 35712 0 malloc-128 128 118 161 633 0 126 35712 0 malloc-128 128 30 249 382 0 126 35712 0 routing nhops 256 39 96 46 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-384 384 56 34 1548 0 30 34560 0 malloc-256 256 39 96 993 0 62 34560 0 malloc-256 256 24 111 401 0 62 34560 0 ripcb 376 3 87 159 0 30 33840 0 SLEEPQUEUE 88 257 127 257 0 126 33792 0 malloc-8192 8192 3 1 4 0 1 32768 0 malloc-2048 2048 0 16 2 0 8 32768 0 malloc-2048 2048 3 13 86 0 8 32768 0 malloc-1024 1024 3 29 74 0 16 32768 0 malloc-1024 1024 6 26 31 0 16 32768 0 malloc-1024 1024 3 29 17 0 16 32768 0 malloc-1024 1024 2 30 3 0 16 32768 0 malloc-512 512 0 64 132 0 30 32768 0 malloc-512 512 4 60 4 0 30 32768 0 malloc-512 512 12 52 65 0 30 32768 0 malloc-512 512 0 64 18 0 30 32768 0 malloc-512 512 2 62 222 0 30 32768 0 malloc-512 512 11 53 72 0 30 32768 0 malloc-512 512 2 62 59 0 30 32768 0 malloc-512 512 3 61 10 0 30 32768 0 pcpu-64 64 501 11 501 0 254 32768 0 PWD 40 121 687 2110 0 254 32320 0 tcp_bbr_pcb 896 0 36 9 0 16 32256 0 ttyinq 160 135 65 300 0 62 32000 0 Files 80 209 191 13680 0 126 32000 0 tcp_log_id_node 120 1 263 8 0 126 31680 0 PGRP 120 29 235 72 0 126 31680 0 clpbuf 2624 0 12 109 0 4 31488 0 L VFS Cache 320 0 96 62 0 30 30720 0 pf tags 104 0 273 2 0 126 28392 0 rl_entry 48 48 540 116 0 254 28224 0 malloc-32 32 361 521 55033 0 254 28224 0 4 Bucket 48 7 581 15 0 254 28224 0 2 Bucket 32 77 805 1151 0 254 28224 0 mqnode 416 5 58 5 0 30 26208 0 udplite_inpcb 408 0 63 16 0 30 25704 0 cpuset 200 7 121 23 0 62 25600 0 malloc-4096 4096 0 6 9 0 2 24576 0 malloc-4096 4096 2 4 16 0 2 24576 0 tcp_log_id_bucket 176 1 137 8 0 62 24288 0 rtentry 168 42 102 46 0 62 24192 0 8 Bucket 80 60 240 857 0 126 24000 0 itimer 352 4 62 20 0 30 23232 0 splice 184 3 123 8 0 62 23184 0 malloc-384 384 1 59 47 0 30 23040 0 malloc-384 384 12 48 17 0 30 23040 0 malloc-384 384 1 59 2 0 30 23040 0 tcp_rack_pcb 1088 0 21 24 0 8 22848 0 domainset 40 0 567 12 0 254 22680 0 Mountpoints 2816 2 6 25 0 4 22528 0 tfo_ccache_entries 80 4 252 4 0 126 20480 0 hostcache 64 3 312 3 0 254 20160 0 ertt 72 16 264 548 0 126 20160 0 malloc-32 32 68 562 1351 0 254 20160 0 malloc-32 32 117 513 2269 0 254 20160 0 malloc-32 32 175 455 1874 0 254 20160 0 malloc-32 32 79 551 159 0 254 20160 0 malloc-32 32 226 404 255 0 254 20160 0 malloc-32 32 17 613 67 0 254 20160 0 KNOTE 160 0 125 188 0 62 20000 0 cryptop 280 0 70 23 0 30 19600 0 AIOCB 552 1 34 131 0 16 19320 0 AIOLIO 272 0 70 34 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 0 2 50 0 1 16384 0 malloc-8192 8192 0 2 3 0 1 16384 0 malloc-8192 8192 0 2 21 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 0 4 4 0 2 16384 0 malloc-2048 2048 0 8 14 0 8 16384 0 malloc-1024 1024 0 16 1 0 16 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 ipq 56 0 288 1 0 254 16128 0 sctp_asconf_ack 48 0 336 1 0 254 16128 0 sctp_laddr 48 16 320 55 0 254 16128 0 tcpreass 48 0 336 3 0 254 16128 0 vtnet_tx_hdr 24 1 667 14086 0 254 16032 0 malloc-16 16 516 484 4719 0 254 16000 0 mqueue 248 2 62 2 0 62 15872 0 AIO 208 2 74 187 0 62 15808 0 kenv 258 17 43 1089 0 30 15480 0 SMR SHARED 24 8 503 8 0 254 12264 0 sackhole 32 0 378 2 0 254 12096 0 malloc-16 16 142 608 4210 0 254 12000 0 malloc-16 16 9 741 15 0 254 12000 0 malloc-16 16 56 694 420 0 254 12000 0 malloc-16 16 63 687 134157 0 254 12000 0 malloc-16 16 28 722 29 0 254 12000 0 malloc-16 16 19 731 161 0 254 12000 0 malloc-8192 8192 1 0 1 0 1 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 UMA Slabs 1 176 10 12 10 0 62 3872 0 KMAP ENTRY 96 15 24 17 0 0 3744 0 tfo 4 0 493 2 0 254 1972 0 md2147483519 4 0 0 0 0 254 0 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf Ethernet anchors 1240 0 0 0 0 64 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf mtags 184 0 0 0 0 62 0 0 sctp_asconf 40 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 MAC labels 40 0 0 0 0 254 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl