last executing test programs: 4.744537259s ago: executing program 3 (id=4): r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x488200, 0x176) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r2, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r3, 0x0) setsockopt$inet6_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) freebsd11_fstat(r1, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fhstat(&(0x7f00000012c0)={{[0xd79, 0xfffffff3]}, {0x9, 0x8, "94adf94c0975eef0ca9e9b1adae23e00"}}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() chown(&(0x7f0000000200)='./file0\x00', 0x0, r6) fstatat(r0, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4200) fhstat(&(0x7f0000001540)={{[0x8000, 0x8]}, {0x3, 0x3, "7b2ac16a740b0e940fc81a71770604eb"}}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000001680)=[0x0, 0x0]) getgroups(0x9, &(0x7f00000016c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) freebsd11_fstatat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) lchown(&(0x7f0000000100)='./file0\x00', 0x0, r11) setresgid(r11, 0xffffffffffffffff, r11) freebsd11_lstat(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = fork() freebsd11_lstat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000015c0)={{0x0, 0x0, r14, r15, 0x2c, 0x4, 0x0, 0xa}, 0xc13, 0x8, 0x1, 0xffff, 0x8, 0xdfbd, r13, r13}) sendmsg$unix(r2, &(0x7f0000001900)={&(0x7f0000000080)=@file={0xa, 0x0, './file0\x00'}, 0xa, &(0x7f0000000440)=[{&(0x7f00000004c0)="353d074e0429fdf082252fb01080c8aad8bfbcd5cbf67dc359583212e15313936ff28e477647f5f044fdd0b1aceba63f628af4f8d6046c23386dffa51587067a7f074bbd96661a7d77c01bd3860f5d41d417483dea88700fe33a1c0ecc7f636a175b983e7fad17f3a90b414e12300837ce554a236a7059661c9475ce8c387fde219717374133724eebef849bc2d95e105a386df7ac0bc1b345cecc718adb7330c8c576e4d64df937abd6c6405ca72920595d490bc00622d1b998d950062cf7cea6ed4fd61545facb6bc514c021a6b1b204522082dadea46eed7eeb5d7972e59aba9498c983db139941b07b030db8d0b255", 0xf1}, {&(0x7f0000000300)="67d38203d1b2123fbad717f6cd68c9ab37ef32a59bf661121dbd8e53ff3be9958b65973ad6be82ee7abf38c16fb20eec3e5f9b752c404d342821c6ab0a650686a9b3f30134c14ffeafccacb0447635503a4689", 0x53}, {&(0x7f00000005c0)="5200f8b4285bd088a5ca19159025b4068138ff160e7405da6558e5a0295eb7e34a5e611a20ec208c6d2e9e71c48d03d93a8b113bf4caad23eae9c228b78cd07edb1d3abb2feb8d8ae3833359cc4601b88c58ced8dadd9a02e3c26c9772310dc55818e65124f2695c145c2b3f71f2f1241cf59fbef5b89034d5b268823e01ce2073ba2fb26b7e3b46227f5ea544c1ad1bfa633f3e962a69258b8ba98db6946148f53e68ce5761db0b8b921a956087e33e4816bb85ba6857e6691d75b278b843849b0d4c1391e44d36ac765c33fbfdd3000a65007dcce967cc4fee3755348b39b0802adfc9ec313a", 0xe7}, {&(0x7f0000000400)="5804", 0x2}], 0x4, &(0x7f00000017c0)=[@cred={0x68, 0xffff, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, r1, r3, r0]}, @rights={0x38, 0xffff, 0x1, [r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r1, r2, r2, r3, 0xffffffffffffffff]}, @cred={0x68, 0xffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, [0x0, 0x0, 0x0, r4, r5, 0x0, r6, r7, 0xffffffffffffffff, r8, r9, r10, r11, r12, r15, 0xffffffffffffffff]}], 0x128, 0x20100}, 0x20000) mount(0x0, 0x0, 0x0, &(0x7f0000000140)) r16 = kqueue() kevent(r16, &(0x7f0000000380)=[{0x4, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, [0x0, 0x1, 0x0, 0x3]}, {0x4, 0xfffffffffffffffe, 0xc700, 0x1000000, 0x3, 0x2, [0x4c, 0x0, 0x7fff]}], 0x2, 0x0, 0x0, 0x0) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x10000, 0x8, 0x3e, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x653, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3ff, 0x0) fspacectl(r1, 0x1, &(0x7f0000000040)={0x3ff, 0x7ffffffffffffc00}, 0x0, 0x0) 4.183838891s ago: executing program 2 (id=9): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) ftruncate(r0, 0x80002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x32, 0x20200, 0x0, 0xffffff33) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r3, 0x6, 0x2000, &(0x7f0000000080)={'bbr\x00'}, 0x24) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x1c, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) aio_error(&(0x7f0000000440)={r0, 0x3ff, &(0x7f0000000340)="85459704950212c688348d0e9ac5a0674809c3d0b58df7fa07a2545428897492360f88f405faae9e2c6427de24ca7214639f08e38de491e63af9bf3d91e752c57fc144a3bd78d3445f915ee49935c4256c21f151ee8584a64084274a5ce260a09a8edf7b212c17553764fd1b3c8003cda87b65182fda5667bb4f0fec76c2666933b0b99db7d6f2fefe2a4e2d2cca413f9ed62ce96a8b99f885d76f37f8c8cec5c1a65db4c03718e7bb7fa99b5d751d7271591cbbd033ce9f8d7a48441c194cfe7c6df6e3d4f095bf1e7c75a9895f4f26bea275fc912ac0b7bcd2314701089f4f3cfe029c8d4dbe", 0xe7, [0x2, 0xffffa063], 0x5, 0x8, 0x10, {0x2, 0x1, &(0x7f0000000180)="da3e2ac2926825d0d43d2c2735807bc21cc03dcbc7f1f18048f32a3b6e7a5f413f74f4bbf3b63b359bf9e3efcc0d7b755afa64244b615ded0b8afcd136f42e28fa4bac05b939bbd8fe89e89c8d17572fba92c101a5c7acc3a5f06949e9"}, {0x0, 0xa, @sigval_ptr=0x8000000000000000, @ke_flags=0x2}}) sendmsg$inet6_sctp(r3, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="ca1b3b5c422ca65675e274c429d4ecb6043c5c10548af3499af18ae3b738b9b6b5428e18e8a6f70a1fad05f03388e5d7fcc796fa874a4c850fc114d59d7d095f07c3338b7653ed757e08fc8325e69831de6411138839053b1a7b32636f2e05fcbcada2375bde92ed0ac706042efe8a3bcd095a7ab57ac9ddbdc94f1545f59d15ada6e76061b7834beac7d501f26c2752d451ca96b5f61b24c88865cfe25dfb939a9fcbb9146239110e08576b3ec84e75714e740034e78dba801094faa3edb5774e0c58a39e0a1439a32fb837000000000000800108fcaeec67663ce77bfbc50affa69135c9385cd6d36ff365039a3c5a89a24e3fed7dee1a35513534f7173d892afd3b73f76a08af4f857a1f2674d9ace7647aace412d13afc1ac098fe6f86bfdef411248be5e096c4e747bfdc32a173cf9cdba48cc36819787fb0c8664abba4c4b89301778de04ce1", 0x149}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, &(0x7f0000000980)={'bbr\x00'}, 0x24) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) socket$inet6_sctp(0x1c, 0x5, 0x84) syz_emit_ethernet(0x90, &(0x7f0000000740)={@random="3a54680fc4b6", @remote, [], {@ipv6={0x86dd, {0x8, 0x6, "7082d2", 0x5a, 0x20, 0xff, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, {[@fragment={0x1b, 0x0, 0x3, 0x1, 0x0, 0x14, 0x64}, @routing={0x26, 0x2, 0x0, 0x8, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}]}], @generic="33bab4299b12617d38e6d54d714f7b71c105a1fb04fb631f9ee5c33b6ed7903bb4e14eb606f8825caa6567baaa2801d0902f18bf1929a289a475"}}}}}) sendmsg$inet6_sctp(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000240)='g', 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="300000008400000009000000ac1400bb100000008400000009000000e00000021000000084"], 0x4c, 0x185}, 0x9) rfork(0x85000) 3.120786775s ago: executing program 0 (id=14): r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000080)=0xb, 0x4) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x1ff, @empty, 0x5}, 0x1c) listen(r0, 0xb) r1 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000080)=0xf, 0x4) bind$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x4, @empty}, 0x1c) r2 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f0000000080)=0xb, 0x4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) openat$crypto(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) bind$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x0, 0x1ff, @loopback, 0x5}, 0x1c) rfork(0x3000) 3.04073215s ago: executing program 0 (id=15): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r0, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open$dir(&(0x7f0000000080)='.\x00', 0x80, 0x0) mkdirat(r1, &(0x7f0000000100)='./file1\x00', 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r0, &(0x7f00000006c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) rename(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)='./file0\x00') rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.880770491s ago: executing program 3 (id=16): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async, rerun: 64) r1 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) (rerun: 64) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) ioctl$SMB_OLD_TRANS(r3, 0xc01c690c, &(0x7f0000000140)={0x6c, 0x6f, 0x30, @word, @buf="e2f7", 0x0, 0x0, 0x0, 0x0}) pipe2(0x0, 0x100004) (async, rerun: 32) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) setsockopt$sock_int(r4, 0xffff, 0x1001, 0x0, 0x0) (async) __semctl$SETVAL(0x0, 0x3, 0x8, &(0x7f00000001c0)=0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0x1c, 0x1c, 0x0, 0x0, @loopback}, 0x1c) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) (async) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async, rerun: 32) clock_gettime(0xa, &(0x7f00000002c0)) (async, rerun: 32) mount(&(0x7f0000000000)='ufs\x00', 0x0, 0x0, 0x0) ftruncate(r0, 0x107d2) shm_rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x3) (async) open$dir(0x0, 0x1, 0x116) (async) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/184, 0xb8}], 0x1, 0x0) r5 = fhopen(&(0x7f0000000100)={{[0x82, 0x7b9]}, {0x8, 0x7, "1e885584ad7d7c38227f069b3d0f641e"}}, 0x8000) extattr_list_fd(r5, 0x1, &(0x7f0000000340)=""/176, 0xb0) 2.82984646s ago: executing program 1 (id=17): lio_listio(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3, 0x0, @sigval_int=0x65, @ke_flags=0x8113}) (async) r0 = open$dir(&(0x7f0000000480)='./file0\x00', 0x8201, 0x0) (async) r1 = kqueue() kevent(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) kqueue() (async) r3 = socket$inet6(0x1c, 0x2, 0x0) sendmsg$inet6_sctp(r3, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2, 0x6, @loopback, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@sndrcv={0x2c, 0x84, 0x2, {0x81, 0x30b2, 0x600, 0x9, 0x3, 0x4, 0x1, 0x6}}, @dstaddrv6={0x1c, 0x84, 0xa, @rand_addr="7779a2ca61bb3f21d2dc04a9a20297bc"}, @init={0x14, 0x84, 0x1, {0x0, 0x9, 0x6000, 0x6}}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @prinfo={0x14, 0x84, 0x7, {0xf, 0x2}}, @init={0x14, 0x84, 0x1, {0x0, 0x14, 0x400, 0xfff}}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @init={0x14, 0x84, 0x1, {0x2, 0x1, 0xbc, 0x2}}], 0xd0, 0x84}, 0x20000) (async) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) (async) r4 = kqueue() kevent(r4, &(0x7f00000001c0)=[{0x3, 0xffffffffffffffff, 0x21, 0x1, 0x0, 0x0, [0x1]}], 0x1, 0x0, 0x0, 0x0) r5 = open$dir(&(0x7f0000000840)='./file0\x00', 0x40000400000002c2, 0x5a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x31, &(0x7f0000000000)={0x1e, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0xfffffff7}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}]}, 0x28) (async) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) (async) close(r0) 2.829118239s ago: executing program 0 (id=18): freebsd11_mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) sendto$inet(0xffffffffffffff9c, &(0x7f0000000240)="606ec430a14e6ff5d7148e0f25a23a6118c9de9a97a201ea7c919a04394f253993bef91d6ce465c18b05b4570864a2d96a8dae021f606d00af38eb94b1bef7a46964ab9a58ae090c1bf6bcfb1bf031b3ea3857722cb48e2b17e1a257abc61bc45cd8ad1770bcb2e53184ccdb8f0d5b6a34fa6b64db6f43c9b8fd325c4cb4c6267ad51d8f1a91a6c580af6a6180b9e65fccc263eb42cb4316ebb1850da3cd8c20810bb7e3c9c0ddf820445a716123177d5877bc44b0fe09ac9527f36bfcf72e6ce557727eefa22b1cae0c360b59318c212f4bd50e1c2e369b9e15fe", 0xdb, 0x20000, 0x0, 0x0) freebsd10_pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r1 = socket(0x1b, 0x3, 0x0) freebsd11_fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={0x68, 0xffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2]}], 0x68, 0x9}, 0x188) close(r0) open$dir(&(0x7f0000000200)='./file0\x00', 0x4, 0x180) ppoll(&(0x7f0000000200)=[{}], 0x209b, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x4) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x2, 0x0, @empty}, 0x1c) r4 = socket(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x10, 0x2, 0x2}, 0x10) lchmod(0x0, 0x62) open$dir(&(0x7f0000000040)='./file1\x00', 0x4000040000100ac2, 0x100) pathconf(&(0x7f0000000180)='./file1\x00', 0x7) r5 = openat$md(0xffffffffffffff9c, 0x0, 0x200, 0x0) fpathconf(r5, 0x2) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) eaccess(0x0, 0x2) sync() sync() open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) 2.745587035s ago: executing program 2 (id=19): r0 = socket(0x2, 0x3, 0x10) open(&(0x7f0000000200)='./bus\x00', 0x10537e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) thr_self(&(0x7f0000000140)=0x0) rtprio_thread(0x0, r2, &(0x7f0000000240)={0x3, 0x11}) ioctl$BIOCSETF(r1, 0x8004667e, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x3, 0x8) syz_emit_ethernet(0xa1, &(0x7f0000000180)={@local, @random="fbefa4031f34", [{[{0x88a8, 0x7, 0x1, 0x3}], {0x8100, 0x0, 0x0, 0x3}}], {@ipv4={0x800, {{0x8, 0x4, 0x1, 0x7, 0x8b, 0x65, 0x6, 0x9, 0x55, 0x0, @loopback, @loopback, {[@noop, @timestamp={0x44, 0x8, 0x10, 0x0, 0x0, [{[], 0x4}]}, @noop]}}, @tcp={{0x0, 0x2, r4, 0x41424344, 0x0, 0x0, 0x19, 0x1, 0x8000, 0x0, 0x133, {[@mss={0x2, 0x4, 0x2a25}, @sack={0x5, 0x2a, [0x87b9, 0x4, 0x2, 0x203, 0x5, 0x2, 0x8e1, 0x8, 0x2, 0xc]}, @timestamp={0x8, 0xa, 0x80000001, 0x8}, @timestamp={0x8, 0xa, 0x9, 0x9}, @sack={0x5, 0xe, [0x80, 0xfffffff7, 0x3]}]}}, {"1b9324ceda57d8"}}}}}}) syz_emit_ethernet(0x115, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="b008000290780006080383220a66850c7d73aa72ef0022082311e47f52c000007a6b358ac4e9d9387af38711b808fcb0d2bda48da871bb0bc6b622201e35712e9fc67464bbbef15048ed439057709e3a08b479688c778c962927f075325350eb88fe44"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) cpuset_getdomain(0x3, 0x1, 0xffffffffffffffff, 0x20, &(0x7f0000000280), 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000080)="04bdfa5d1d2873c6aec43050006123339a346f731573d8d508753fc4e1dd543dbe2da6dd", 0x1002a) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) 2.340857792s ago: executing program 2 (id=20): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0xc00, 0x0) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x0, 0x1, &(0x7f0000000040)='p', 0x3, 0xfdffffff, [0x0, 0x1c]}) open(&(0x7f0000000100)='./file0\x00', 0x480e14, 0x0) 2.13020813s ago: executing program 2 (id=21): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = kqueue() r2 = fcntl$dupfd(r1, 0x11, r0) ioctl$DIOCADDALTQV0(r2, 0x8004667d, &(0x7f0000000200)) chown(0x0, 0x0, 0x0) setreuid(0x0, 0x0) r3 = open(0x0, 0x80400000000206, 0x48) r4 = kqueue() r5 = socket(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) setitimer(0x0, &(0x7f0000000280)={{0x7, 0x2}, {0xffffffff, 0x4}}, 0x0) connect$inet(r5, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2, 0x2, @loopback}, 0x10) sendto(r5, &(0x7f0000000380)="8e741440cbec08ded2c5eca7d3d5098a1eeb19d5f95476270256fe6ccc554d0112981bdcc2c23a064b7da59f4fd0571e7cbd32f04f51420be57ceeaf74a083211a0a", 0x42, 0x20005, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) socket$inet6_tcp(0x1c, 0x1, 0x0) setuid(0xee01) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x52, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c, 0x3, 0x21596174, @mcast2, 0xfffffffc}}, {{0x1c, 0x1c, 0x2, 0x7, @remote={0xfe, 0x80, '\x00', 0x0}}}}, 0x108) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysarch$I386_GET_LDT(0x0, &(0x7f0000000140)={0x0, 0x0}) sendto$inet6(r2, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0x1c, 0x1c, 0x0, 0x53, @remote={0xfe, 0x80, '\x00', 0x0}, 0x9}, 0x1c) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/148, 0x94}, {&(0x7f0000000080)}, {&(0x7f0000000400)=""/154, 0x9a}, {0x0}, {&(0x7f0000000240)=""/61, 0x3d}, {0x0}], 0x6, 0x0}, 0x40000) kevent(r4, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0) setsockopt$inet6_sctp_SCTP_NODELAY(r3, 0x84, 0x4, 0x0, 0x0) fork() socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) 2.127910473s ago: executing program 0 (id=22): socket$inet6_udplite(0x1c, 0x2, 0x88) getsockname(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000001b00)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [0x40000, 0x1ff], 0x0, 0x2, 0x0, {0x0, 0x4, 0x0}, {0x0, 0x0, @sival_ptr=0x400, @spare=[0x1, 0x2, 0x0, 0x33518c07, 0xdca6, 0x7fffffff, 0x800000000, 0xffff]}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500005c00009078e0000002e00000020b00907800007e004000000200000004008800007f000001ac1400aa891700ac1400bb00000000ac1400aaac1400bbac1400bb8303008995000000000600000000e0000002000000"]) sync() aio_waitcomplete(0x0, 0x0) msgget$private(0x0, 0x790) r2 = socket$inet6_tcp(0x1c, 0x1, 0x0) r3 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1b, &(0x7f00000001c0), 0x4) sendto$inet6(r3, 0x0, 0x0, 0x80, &(0x7f0000000280)={0x1c, 0x1c, 0x3, 0x80000000, @mcast2, 0x1}, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DIOCSETLIMIT(r4, 0xc0084428, &(0x7f00000000c0)={0x3, 0x3}) setsockopt$inet6_int(r2, 0x29, 0x30, &(0x7f0000000080), 0x4) r5 = semget$private(0x0, 0x4, 0x10) r6 = socket$inet6(0x1c, 0x3, 0x1) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000040)=0x80000000, 0x4) __semctl$GETZCNT(r5, 0x1, 0x7) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x20000) bind$inet6(r2, &(0x7f0000000100)={0x49, 0x1c, 0x0, 0x1, @loopback, 0x800}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @random="7004f5b37507", [], {@ipv6={0x86dd, {0x0, 0x6, "d900", 0x30, 0x52, 0x0, @rand_addr="3bcc694212fae9849cf1404e6d2ee900", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x29000000, {0x0, 0x6, "06c33e", 0x0, 0x6, 0x0, @loopback={0x1000000}, @empty}}}}}}}) freebsd11_getfsstat(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0xfffffd38, 0x3) setresuid(0x0, r7, 0xffffffffffffffff) setsockopt$sock_int(r2, 0xffff, 0x1004, &(0x7f0000000000)=0x7, 0x4) ioctl$MDIOCDETACH(0xffffffffffffffff, 0xc1c06d01, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom(r8, &(0x7f0000000100)=""/255, 0xfffffe24, 0x860, 0x0, 0x0) 2.126871136s ago: executing program 3 (id=23): open$dir(&(0x7f0000000240)='./file0\x00', 0x100000, 0x2) socket(0x1c, 0x1, 0x0) procctl$PROC_TRAPCAP_CTL(0x3, 0x0, 0x9, &(0x7f0000000000)) ktimer_create(0x4, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000440)=[{0x1000, 0xfffffffffffffffa, 0x4, 0x200, 0x4, 0x5, [0x6, 0x9, 0x6000000000000000, 0xfffffffffffffff7]}, {0x5, 0xfffffffffffffff5, 0x0, 0x80, 0xf0, 0x2, [0xa1, 0x80000000, 0x91000000000000, 0x5]}, {0x7, 0x1, 0xc000, 0x1, 0xc279, 0x5, [0x9, 0x40, 0x4, 0x3]}, {0x10001, 0xfffffffffffffffe, 0x4054, 0x80000000, 0x0, 0x7fffffff, [0x6, 0x1, 0x96a, 0x5]}, {0x5, 0xfffffffffffffff3, 0x1a, 0xad4097252466d27b, 0xe36, 0x3, [0x4, 0xfffffffffffffffa, 0x7fffffffffffffff, 0x401]}, {0x7, 0xfffffffffffffff5, 0x40, 0x8, 0x908, 0x602, [0x8, 0x5, 0x0, 0x10000]}, {0x1000, 0xfffffffffffffff8, 0x2, 0x20000000, 0x9, 0x7, [0x8000000000000001, 0x8aa, 0x1, 0x3]}, {0x8000000000000000, 0xfffffffffffffff5, 0x0, 0x4, 0x1, 0x52c00000000, [0xf, 0x6, 0xef85, 0x2]}], 0x8, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6036ea0700383a0000000000000000000000000000000000fe8000000000000000000000000000aa0100907800000000605adf0000002c0000000000000000fe000000000000000100000000000000fe00000000000000015400000000000000d79d1a099c359bd9b5fa99a3adfe657f763d4904d5a2435f3debaca77abeaa1dee751dfa6f2f271c0719402b14067db973fced84d5a0c665c51c3de96b490aae7a5ef4372fadf59dff085b1f46e698598cb6c6f4565f86efc72570c223b909fc59b3cb9623b9d22aa9"]) openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000040)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x8d800000, [0x0, 0x2, 0x0, 0x5]}) cpuset_setaffinity(0x3, 0x2, 0x2, 0x8, &(0x7f0000000200)={[0x3e]}) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000)=0x9, 0x4) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) connect$inet(r1, &(0x7f0000000400)={0x10, 0x2, 0x2, @loopback}, 0x10) sendmsg$unix(r1, &(0x7f0000002580)={0x0, 0x19, &(0x7f0000000100)=[{&(0x7f0000000140)="4640c719021399600f76aac84cf9aec359d5c9ce67f6453118a671000080e0c44ebc7bc3ef22bca56aa8f60468ba787ced0d999f926f54ab63ee1e", 0xfe22}], 0x1, 0x0, 0x0, 0x180}, 0x20104) getpid() mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sysarch$I386_GET_IOPERM(0x3, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) rtprio(0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r4, 0x800007ffffffe, &(0x7f0000000300)="e2", 0x1, [0xfffff, 0xfffff7ff], 0x7, 0x6, 0x0, {0x0, 0x0, 0x0}, {0x1, 0x1d, @sival_int=0x8000000}}) fcntl$setstatus(r3, 0x4, 0x4c) socket$inet6(0x1c, 0x3, 0x0) 2.010313054s ago: executing program 1 (id=24): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) (async) open$dir(0x0, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x28}, 0x8) (async) write(r1, &(0x7f0000000400)="3eaf8015bfef438af5a7ef2f094e2f21262d903897ad06b7d055bf4c01cf9c6f45dfd4e67639b34bccaa350162f53535d2a258cbf57071615586813822461b2b6c76888c67498b5263e4286f65ff0c665846f789040a02b55de908b23b95267bc6b3fdbec5af52c8aa84258e3efe3a778f4f02dbd5781d80f6cea46605321b6b71ddedecdf48745708ba9f4a9a608f959975d14af16449d6192f5c0663e10b6ac35247fe4ff6bffa18413a86eff715e1f905aad2546dd604742a572e78079c40", 0xc0) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001b40), 0x0, 0x0}, 0xc2) dup2(r0, r0) aio_cancel(0xffffffffffffffff, 0x0) (async) ioctl$CIOCGSESSION2(0xffffffffffffffff, 0xc040636a, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x28) (async) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x50, &(0x7f0000000340)={0x6, {{0x10, 0x2, 0x1, @multicast1}}}, 0x88) (async) bind$inet(r3, 0x0, 0xa580d3eb2f571271) (async) r4 = socket(0x10, 0x1, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$BIOCSETFNR32(r5, 0x80084282, 0x0) (async) cap_rights_limit(r2, &(0x7f0000000140)=[0x20000207fffffdc, 0x3fffffffffffffe]) (async) r6 = socket$inet(0x2, 0x1, 0x0) listen(r6, 0x2) (async) setsockopt$sock_splice(r6, 0xffff, 0x1023, &(0x7f0000000000)={0xffffffffffffff9c, 0x0, {0xffffffff, 0x3}}, 0x20) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r4, 0x6, 0x2000, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffff9c, 0x6, 0x40, &(0x7f0000000000)='newreno\x00', 0x8) mount(0x0, 0x0, 0x8400004, 0x0) munlockall() (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000084000000028b216cd77b48cb8bbf00030000010000b2000000", @ANYRESDEC=r1, @ANYBLOB, @ANYRES32=0x0], 0x98, 0x8}, 0x20000) 1.970612242s ago: executing program 3 (id=25): cpuset_setdomain(0x3, 0x5, 0x0, 0x20, &(0x7f0000000000)={[0x1, 0x0, 0x0, 0x1]}, 0x2) r0 = socket$inet6(0x1c, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_RXTLS_ENABLE(r1, 0x6, 0x29, &(0x7f00000001c0)={&(0x7f0000000d40)='\x00', 0x0, 0x0, 0x19, 0x1, 0x0, 0x1c, 0x0, 0x0, 0x3, 0x3, "26cd5d1796f599f4"}, 0x40) ioctl$OPIO_KEYMAP(0xffffffffffffff9c, 0x8a026b07, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x100000, 0x0) pathconf(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$DIOCRADDADDRS(0xffffffffffffffff, 0xc0184415, 0x0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r3, 0x80000001, 0x0, 0x0, [0x0, 0x1ff], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0x9fc040a3bd859cca}}) aio_mlock(&(0x7f0000000240)={0xffffffffffffffff, 0x81, 0x0, 0x0, [0x665, 0x1], 0x92b, 0x7, 0x7, {0xffffffffffff1961, 0x1800, 0x0}, {0x1, 0x19, @sival_int=0x7fff, @spare=[0x8, 0x9, 0x2, 0x3f59, 0x3ff, 0x7, 0x8000000000000000, 0x8001]}}) aio_return(0x0) fhstat(&(0x7f0000000040)={{[0x5c8951ac, 0x3bea9983]}, {0x0, 0x0, "3d0000009b1557d800"}}, 0x0) r4 = socket(0x1b, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="02141b00020000008e4ca277fce00d8f", 0x10, 0x100, 0x0, 0x0) mount(&(0x7f00000003c0)='msdosfs\x00', 0x0, 0x0, 0xffffffffffffffff) open(0x0, 0x10200, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}, 0x1c) r5 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) ioctl$CIOCGSESSION2(r5, 0xc040636a, &(0x7f0000000080)={0x10, 0x8, 0x1, &(0x7f0000000740)='\x00', 0x1, &(0x7f00000000c0)='\"', 0x1000, 0x7d86619b, [0x0, 0x9, 0xc]}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x51, &(0x7f00000000c0)={0x800, {{0x1c, 0x1c, 0x0, 0x100, @mcast1, 0x3}}}, 0x88) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000080)=0xffffffff, 0x4) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d60f16", 0x28, 0x67, 0x0, @rand_addr="abbde059ff7a43f702cee73684eec42d", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @local={0xfe, 0x80, '\x00', 0x0}}}}}}}) r6 = open$dir(&(0x7f0000000200)='.\x00', 0x80000, 0x0) fcntl$dupfd(r6, 0x2, r6) mkdirat(r6, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.880652658s ago: executing program 1 (id=26): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x40000) open$dir(&(0x7f0000000000)='.\x00', 0x40, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_TXTLS_ENABLE(r0, 0x6, 0x27, &(0x7f0000000680)={&(0x7f0000000640)="00b2c06df480cfe19f0da47ac0235414", 0x0, &(0x7f0000000100)="78aff7916dc0", 0xb, 0x10, 0x0, 0x13, 0x6, 0x0, 0x3, 0x3, "6a0802e40094ffff"}, 0x40) listen(r0, 0xd) bind$inet6(0xffffffffffffffff, 0x0, 0x0) aio_cancel(0xffffffffffffffff, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = dup(r0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r4, r5) getsockopt$inet6_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x23, &(0x7f0000001900)={@in={{0x10, 0x2, 0x1, @multicast1}}, r6}, 0x90) setsockopt$inet6_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x902, &(0x7f00000000c0)=r6, 0x4) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x2, 0x0, @local={0xac, 0x14, 0x0}}, 0x10) sendto$inet(r2, &(0x7f0000001180)="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", 0x2e6, 0x0, &(0x7f0000000000)={0x10, 0x2, 0x2}, 0x10) shutdown(r2, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x80010, 0xffffffffffffffff, 0x3) ioctl$BIOCSETFNR32(0xffffffffffffffff, 0x80084282, &(0x7f0000000080)={0x7, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffff9c, 0x6, 0x40, &(0x7f0000000000)='newreno\x00', 0x8) mount(&(0x7f0000000000), 0x0, 0x8400004, 0x0) munlockall() 1.820279315s ago: executing program 2 (id=27): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20104, 0x0, 0x0) freebsd11_fstatfs(0xffffffffffffffff, &(0x7f0000000dc0)) getgroups(0x0, 0x0) setregid(0x0, 0x0) setegid(0x0) r1 = fork() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x10, 0x9, 0x0, 0xaec}, 0x1, 0x7, 0x5, 0x3, r1, 0xffffffffffffffff, 0x1}) syz_emit_ethernet(0x56c, &(0x7f00000005c0)={@random="4b8f3a6f6f98", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x536, 0x3a, 0x3eda8841f6300bf7, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x400, 0x7, "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"}}}}}}) write(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = kqueue() freebsd11_kevent(r2, &(0x7f0000000000)=[{}], 0x6a81, 0x0, 0x50, 0x0) 440.848299ms ago: executing program 0 (id=28): r0 = open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) (async) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) r2 = __specialfd$eventfd(0x1, &(0x7f0000000000)={0x80000000, 0x1}, 0x8) (rerun: 64) read(r2, &(0x7f0000001880)=""/226, 0xe2) (async) write(r2, &(0x7f0000000200)="0788093413774759", 0x8) (async) r3 = getpid() fcntl$lock(r0, 0xc, &(0x7f0000000040)={0x2, 0x3, 0x8, 0xfff, r3}) (async, rerun: 32) minherit(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x0) (rerun: 32) fork() 55.439324ms ago: executing program 1 (id=29): syz_emit_ethernet(0xfffffffffffffe19, &(0x7f0000000000)={@remote, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x48, 0x3a, 0x0, @rand_addr="3bcc2629a17a6c58afb8877c8be162e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x7e00, {0x0, 0x6, "06c33e", 0x0, 0x11, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr="ba1414575bcfc53f539f5d7b4e122e18", @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}]}]}}}}}}}) 53.650955ms ago: executing program 2 (id=30): open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) symlink(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sigaction(0x5b, &(0x7f0000000140)={&(0x7f0000000340)="f30f2dadad000000c4e1f55f9b00080000f08794a0e4553810c4e2e5bf51c63e263e660f380755b1c4e189c1a240490000c481fe700600660f3a41828bcf0000def3ec326de3516cb69989999908", 0x35, {[0xfffff801, 0x50e5, 0xfffffffe, 0x78d]}}, 0x0) lio_listio(0x0, 0x0, 0x0, &(0x7f0000000a00)={0x1, 0x6, @sival_ptr, @spare=[0x101, 0x3, 0x0, 0x2e1, 0x7, 0x3, 0x5, 0x8]}) sigaction(0xd, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) sigwaitinfo(&(0x7f0000000100)={[0xffffff02, 0x8, 0x4bf, 0x5]}, 0x0) socketpair(0x1, 0x1, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0xffff, 0x1002, &(0x7f00000002c0)=0x4, 0x4) sendto(r3, &(0x7f00000000c0)="fafeb872a49b", 0x6, 0x100, 0x0, 0x0) r4 = kqueue() getpgid(0x0) kevent(r4, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0xc, &(0x7f0000000040)={@multicast1, @remote={0xac, 0x14, 0x0}}, 0xc) r5 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_tcp_buf(r5, 0x6, 0x24, &(0x7f0000000040)='y', 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x24, &(0x7f0000000100)='a', 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r6, r7) setsockopt$inet_tcp_buf(r7, 0x6, 0x26, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x24, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) r8 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) inotify_add_watch_at(r8, r0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21000430) mlockall(0x2) 52.578012ms ago: executing program 1 (id=31): rfork(0x291d698b2154a6c0) r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x100) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = __specialfd$inotify(0x2, &(0x7f0000000180), 0x4) inotify_add_watch_at(r1, r0, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000410) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ftruncate(r2, 0x107d2) r3 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) r4 = fcntl$getown(r0, 0x5) r5 = getpgrp(0xffffffffffffffff) procctl$PROC_REAP_KILL(0x2, r4, 0x6, &(0x7f0000000100)={0x2400, 0x6, r5, 0x3}) mount(&(0x7f0000000000)='msdosfs\x00', &(0x7f0000000040)='./file0\x00', 0x8008, &(0x7f00000001c0)) dup(r0) faccessat(r3, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x4000) chflags(&(0x7f0000000080)='./file0\x00', 0x160000) copy_file_range(r3, 0x0, r3, &(0x7f0000000180)=0xffff, 0x3ff, 0x0) 35.764222ms ago: executing program 3 (id=32): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000380)) (async, rerun: 32) r1 = msgget$private(0x0, 0x5d0) msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0) (async) msgsnd(r1, &(0x7f0000001f40)=ANY=[], 0x401, 0x0) (async, rerun: 64) msgsnd(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000"], 0x12f, 0x0) (async, rerun: 64) msgrcv(r1, 0x0, 0x0, 0x0, 0x1800) r2 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x10000, &(0x7f00000000c0)=0x3, 0x4) (async) connect$inet6(r2, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) (async) listen(r0, 0xb7c5) select(0x40, &(0x7f0000000000)={0x8, 0x120000000000000, 0xfffffffffffffe00, 0x8, 0x66a1, 0x1, 0x4c, 0xc}, 0x0, 0x0, 0x0) shutdown(r0, 0x1) (async) mprotect(&(0x7f0000dcb000/0x1000)=nil, 0x1000, 0x5) (async) madvise(&(0x7f00009d6000/0x600000)=nil, 0x600000, 0x0) (async) setreuid(0xee00, 0x0) (async) cpuset_setaffinity(0x3, 0x1, 0x20, 0x8, &(0x7f0000000380)={[0x2]}) openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) freebsd11_mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x801) (async) clock_settime(0x0, 0x0) (async) clock_nanosleep(0xa, 0x1, &(0x7f0000000040)={0x200, 0x4000000}, 0x0) (async) execve(0x0, 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, 0x0, 0x8, 0x101) aio_waitcomplete(0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bindat$unix(r3, r4, &(0x7f0000000140)=@file={0xa, 0x0, './file0\x00'}, 0xa) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xc002010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) rfork(0x3060) (async, rerun: 32) openat$crypto(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 32) 525.592µs ago: executing program 0 (id=33): connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0x1c, 0x1c, 0x0, 0x4, @remote={0xfe, 0x80, '\x00', 0x0}, 0x2}, 0x1c) (async) openat$bpf(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0xe, 0xfffffffffffffff9, 0x8009, 0x8, 0xe8c8, 0x0, [0x0, 0x2]}], 0x1, 0x0, 0x0, 0x0) (async) getpeername$unix(0xffffffffffffff9c, &(0x7f0000000300)=@abs={0x8}, &(0x7f00000004c0)=0x8) (async) socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) nanosleep(&(0x7f0000000100)={0xfffffffffffffffd, 0x50}, 0x0) (async) ioctl$CIOCGSESSION2(r1, 0xc040636a, &(0x7f00000000c0)={0x15, 0x0, 0x17, &(0x7f0000000000)="0b6fac4103f48e8d08afe5de81d4755aedaacdd4743c7e", 0x0, 0x0, 0x0, 0x7d86699a}) (async) ioctl$CIOCCRYPT(r1, 0xc0306367, &(0x7f0000000180)={0xfffffff9, 0x1, 0x9, 0x10203, &(0x7f0000000340)="4957ed7bbc9a89e0bf41bc8c9f07a62c9a42d6959cf49b7c06c0c90ab44058dd4d39c64dd3945b7d", 0x0, 0x0, 0x0}) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{0x2, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) (async) fstatat(r1, &(0x7f0000000500)='./file0\x00', &(0x7f0000000740), 0x200) (async) setsockopt$inet_int(r2, 0x0, 0x2, 0x0, 0x0) (async) dup2(0xffffffffffffffff, r1) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) r4 = getpgrp(0xffffffffffffffff) (async) fcntl$setflags(r1, 0x2, 0x1) (async) procctl$PROC_PDEATHSIG_CTL(0x0, 0x0, 0xb, &(0x7f0000000840)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async) sync() (async) procctl$PROC_WXMAP_STATUS(0x0, r4, 0x16, &(0x7f00000001c0)) (async) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) (async) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x149}], 0x1, 0x0, 0x0, 0x81}, 0x0) (async) bindat$unix(r1, 0xffffffffffffffff, &(0x7f0000000200)=@file={0xa, 0x2, './file0\x00'}, 0xa) (async) thr_suspend(&(0x7f0000000240)={0x8, 0xc}) (async) fpathconf(0xffffffffffffff9c, 0x0) (async) sync() (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x20008) 0s ago: executing program 1 (id=34): open$dir(&(0x7f0000000240)='./file0\x00', 0x100000, 0x2) socket(0x1c, 0x1, 0x0) ktimer_create(0x4, 0x0, 0x0) openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x8, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x100, &(0x7f0000000100)) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) freebsd11_getdents(r1, &(0x7f0000000180)=""/53, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000002700)="6a3364f80c04449d", 0x2400, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) kmq_notify(0xffffffffffffffff, 0x0) r3 = kqueue() freebsd11_kevent(r3, &(0x7f0000001a40), 0x0, &(0x7f0000001ac0)=[{}], 0x1, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r1, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) sendfile(r7, r4, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=[{&(0x7f0000000500)="ac", 0x1}], 0x1, 0x0}, 0x0, 0x7) setgroups(0x3, &(0x7f0000000f80)=[0x0, 0xffffffffffffffff, 0x0]) openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(0x0, 0x100000) r8 = kqueue() kevent(r8, &(0x7f00000002c0)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c2}, {0x4, 0xffffffffffffffff, 0x4023, 0xc0000000, 0x2, 0x8, [0x5, 0xfffffffffffffff9, 0x1b619951, 0x8000]}, {0x4, 0xa, 0x20, 0x200, 0x4, 0x20000006, [0x200, 0x3, 0x7, 0x7]}], 0x3, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. Expensive callout(9) function: 0xffffffff81ad9d40(0) 0.002103401 s vnode_pager_putpages: zero-length write at 0 resid 8192 0xfffffe006e001000: type VREG state VSTATE_CONSTRUCTED op 0xffffffff8371c0c0 usecount 4, writecount 4, refcount 5 seqc users 0 hold count flags () flags (VIRF_PGREAD|VMP_LAZYLIST) v_object 0xfffffe005410daa8 ref 1 pages 24 cleanbuf 2 dirtybuf 1 lock type ufs: EXCL by thread 0xfffffe005409d780 (pid 817, syz-executor, tid 100128) nlink=1, effnlink=1, size=697470, extsize 0 generation=7452cd3d, uid=0, gid=0, flags=0x4 ino 79, on dev gpt/rootfs if_delmulti_locked: detaching ifnet instance 0xfffffe0058574800 Out of ktrace request objects. Kernel page fault with the following non-sleepable locks held: exclusive sleep mutex tcphash (tcphash) r = 0 (0xfffffe00077e8a00) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:2734 exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe00777b0020) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:1471 stack backtrace: #0 0xffffffff816844a6 at witness_debugger+0x156 #1 0xffffffff816869b6 at witness_warn+0x876 #2 0xffffffff821656d2 at trap_pfault+0x162 #3 0xffffffff8216456e at trap+0x78e #4 0xffffffff8210bda8 at calltrap+0x8 #5 0xffffffff819c9428 at in_pcbdrop+0x98 #6 0xffffffff81a45cd7 at tcp_close+0x177 #7 0xffffffff81a059bc at tcp_do_segment+0x145c #8 0xffffffff81a02759 at tcp_input_with_port+0x21a9 #9 0xffffffff81a004be at tcp6_input_with_port+0x8e #10 0xffffffff81a037b6 at tcp6_input+0x26 #11 0xffffffff81ac0285 at ip6_input+0x2285 #12 0xffffffff8189d488 at swi_net+0x2b8 #13 0xffffffff814b805c at ithread_loop+0x4ec #14 0xffffffff814b04fc at fork_exit+0xcc #15 0xffffffff8210cdce at fork_trampoline+0xe Fatal trap 12: page fault while in kernel mode cpuid = 1; apic id = 01 fault virtual address = 0xffffffffffffffff fault code = supervisor write data, page not present instruction pointer = 0x20:0xffffffff819c7263 stack pointer = 0x28:0xfffffe0056b4f380 frame pointer = 0x28:0xfffffe0056b4f3b0 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 12 (swi1: netisr 0) rdi: fffffe00777b0000 rsi: 0000000000000000 rdx: 0000000000000000 rcx: 000000000eef6000 r8: 0000000000000000 r9: 0000000000000001 rax: ffffffffffffffff rbx: fffffe00777b0044 rbp: fffffe0056b4f3b0 r10: 0000000000001450 r11: 0000000000000033 r12: ffffffffffffffff r13: fffffe00777b0250 r14: fffffe00777b0000 r15: fffffe00777b0008 trap number = 12 panic: page fault cpuid = 1 time = 1758519181 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056b4ebb0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056b4ed10 vpanic() at vpanic+0x257/frame 0xfffffe0056b4eed0 panic() at panic+0xb5/frame 0xfffffe0056b4ef90 trap_pfault() at trap_pfault+0xaf2/frame 0xfffffe0056b4f0d0 trap() at trap+0x78e/frame 0xfffffe0056b4f2b0 calltrap() at calltrap+0x8/frame 0xfffffe0056b4f2b0 --- trap 0xc, rip = 0xffffffff819c7263, rsp = 0xfffffe0056b4f380, rbp = 0xfffffe0056b4f3b0 --- in_pcbremhash_locked() at in_pcbremhash_locked+0x263/frame 0xfffffe0056b4f3b0 in_pcbdrop() at in_pcbdrop+0x98/frame 0xfffffe0056b4f3d0 tcp_close() at tcp_close+0x177/frame 0xfffffe0056b4f490 tcp_do_segment() at tcp_do_segment+0x145c/frame 0xfffffe0056b4f770 tcp_input_with_port() at tcp_input_with_port+0x21a9/frame 0xfffffe0056b4fa20 tcp6_input_with_port() at tcp6_input_with_port+0x8e/frame 0xfffffe0056b4fa60 tcp6_input() at tcp6_input+0x26/frame 0xfffffe0056b4fa90 ip6_input() at ip6_input+0x2285/frame 0xfffffe0056b4fcf0 swi_net() at swi_net+0x2b8/frame 0xfffffe0056b4fd90 ithread_loop() at ithread_loop+0x4ec/frame 0xfffffe0056b4fef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0056b4ff30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0056b4ff30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 12 tid 100033 ] Stopped at kdb_enter+0x6e: movq $0,0x259e0f7(%rip) db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff828086a0 .str.27 rsp 0xfffffe0056b4ecf0 rbp 0xfffffe0056b4ed10 rsi 0 rdi 0xffffffff81644349 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x17 r12 0xfffffe0007821780 r13 0xfffffffffffffffd r14 0xffffffff828086a0 .str.27 r15 0 rip 0xffffffff8162da9e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x259e0f7(%rip) db> show proc Process 12 (intr) at 0xfffffe0007808560: state: NORMAL uid: 0 gid: 0 supp gids: 0 parent: pid 0 at 0xffffffff83b56080 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b56080 reapsubtree: 12 sigparent: 20 vmspace: 0xffffffff83b57060 (map 0xffffffff83b57060) (map.pmap 0xffffffff83b57100) (pmap 0xffffffff83b57170) threads: 20 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 Run CPU 1 [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] db> ps pid ppid pgrp uid state wmesg wchan cmd 864 764 764 0 R (threaded) syz-executor 100192 RunQ syz-executor 100209 RunQ syz-executor 862 766 766 0 R (threaded) syz-executor 100107 RunQ syz-executor 100201 L *tcpinp 0xfffffe00079fa0c0 syz-executor 100202 S msgsnd 0xfffffe005853e078 syz-executor 100203 RunQ syz-executor 861 1 763 0 S uwait 0xfffffe006df0b600 syz-executor 857 765 765 0 R (threaded) syz-executor 100154 RunQ syz-executor 100196 S sigwait 0xfffffe00540f2610 syz-executor 100204 S sbwait 0xfffffe006b733e0c syz-executor 854 1 765 0 S uwait 0xfffffe00584e9280 syz-executor 850 0 0 0 DL (threaded) [KTLS] 100106 D - 0xfffffe0059691b00 [thr_0] 100187 D - 0xfffffe0059691b80 [thr_1] 100188 D - 0xffffffff83cbe628 [reclaim_0] 847 1 765 60929 S uwait 0xfffffe006df09f00 syz-executor 835 0 0 0 DL mdwait 0xfffffe00083fd000 [md0] 832 0 0 0 DL (threaded) [so_splice] 100149 D - 0xfffffe005858ee00 [thr_0] 100150 D - 0xfffffe005858ee40 [thr_1] 831 1 764 0 S uwait 0xfffffe00584eb180 syz-executor 824 1 763 0 S uwait 0xfffffe006df0bc00 syz-executor 822 1 766 0 S uwait 0xfffffe006df09b00 syz-executor 820 803 820 0 Ss select 0xfffffe00586136c0 dhclient 815 0 0 0 DL aiordy 0xfffffe0054112568 [aiod4] 814 0 0 0 DL aiordy 0xfffffe0054112ac0 [aiod3] 813 0 0 0 DL aiordy 0xfffffe0054110000 [aiod2] 812 0 0 0 DL aiordy 0xfffffe00540f4018 [aiod1] 810 1 810 0 Ss select 0xfffffe00586135c0 dhclient 803 786 423 65 S select 0xfffffe0057df7340 dhclient 786 423 423 0 S wait 0xfffffe00540d4568 sh 766 762 766 0 S nanslp 0xffffffff83bacc40 syz-executor 765 762 765 0 S nanslp 0xffffffff83bacc40 syz-executor 764 762 764 0 R syz-executor 763 762 763 0 R syz-executor 762 760 760 0 R syz-executor 760 758 760 0 Ss sigsusp 0xfffffe00540d20b0 csh 758 681 758 0 Ss select 0xfffffe0057df75c0 sshd 747 1 747 0 Rs+ CPU 0 getty 746 1 746 0 Ss+ ttyin 0xfffffe00582784b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe005862fcb0 getty 744 1 744 0 Ss+ ttyin 0xfffffe00582788b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe0058278cb0 getty 742 1 742 0 Ss+ ttyin 0xfffffe00586300b0 getty 741 1 741 0 Ss+ ttyin 0xfffffe00586304b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe00586308b0 getty 739 1 739 0 Ss+ ttyin 0xfffffe0058630cb0 getty 737 1 17 0 S+ piperd 0xfffffe00598608a0 logger 736 735 17 0 S+ nanslp 0xffffffff83bacc41 sleep 735 1 17 0 S+ wait 0xfffffe00540aa568 sh 685 1 685 0 Ss nanslp 0xffffffff83bacc40 cron 681 1 681 0 Ss select 0xfffffe0057ddb9c0 sshd 494 1 494 0 Rs syslogd 423 1 423 0 Ss wait 0xfffffe00540a9560 devd 422 1 422 65 Ss select 0xfffffe0057ddbec0 dhclient 337 1 337 0 Ss select 0xfffffe0057ddbcc0 dhclient 334 1 334 0 Ss select 0xfffffe0057de0040 dhclient 16 0 0 0 DL syncer 0xffffffff83cca820 [syncer] 15 0 0 0 DL vlruwt 0xfffffe000780a018 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cc8d60 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100093 D sdflush 0xfffffe005862f0e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d13cc0 [vmdaemon] 8 0 0 0 RL (threaded) [pagedaemon] 100077 RunQ [dom0] 100080 D launds 0xffffffff83cf9d94 [laundry: dom0] 100081 D umarcl 0xffffffff81e13ce0 [uma] 7 0 0 0 DL - 0xffffffff839255d8 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff844d4f20 [pf purge] 5 0 0 0 DL waiting 0xffffffff84889700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838ef340 [doneq0] 100046 D - 0xffffffff838ef2c0 [async] 100075 D - 0xffffffff838ef140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83cf5660 [crypto] 100043 D crypto_ 0xfffffe0053ee4d30 [crypto returns 0] 100044 D crypto_ 0xfffffe0053ee4d80 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b55640 [g_event] 100038 D - 0xffffffff83b55660 [g_up] 100039 D - 0xffffffff83b55680 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 RL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 Run CPU 1 [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809010 [init] 10 0 0 0 DL audit_w 0xffffffff83cf6100 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c51ff0 [swapper] 100005 D - 0xfffffe0053ea0100 [softirq_0] 100006 D - 0xfffffe0053ea0000 [softirq_1] 100007 D - 0xfffffe0053e9fe00 [if_io_tqg_0] 100008 D - 0xfffffe0053e9fd00 [if_io_tqg_1] 100009 D - 0xfffffe0053e9fc00 [if_config_tqg_0] 100010 D - 0xfffffe000776aa00 [kqueue_ctx taskq] 100011 D - 0xfffffe000776a900 [jail_remove taskq] 100012 D - 0xfffffe000776a800 [bus taskq] 100015 D - 0xfffffe000776a500 [thread taskq] 100017 D - 0xfffffe000776a300 [aiod_kick taskq] 100018 D - 0xfffffe000776a200 [deferred_unmount ta] 100019 D - 0xfffffe000776a100 [inm_free taskq] 100020 D - 0xfffffe000776a000 [in6m_free taskq] 100021 D - 0xfffffe0007769e00 [linuxkpi_irq_wq] 100022 D - 0xfffffe0007769d00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0007769d00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0007769d00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0007769d00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0007769c00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0007769c00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0007769c00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0007769c00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0007769a00 [firmware taskq] 100040 D - 0xfffffe0007769900 [crypto_0] 100041 D - 0xfffffe0007769900 [crypto_1] 100056 D - 0xfffffe0057de6d00 [vtnet0 rxq 0] 100057 D - 0xfffffe0057de6c00 [vtnet0 txq 0] 100058 D - 0xfffffe0057de6b00 [vtnet0 rxq 1] 100059 D - 0xfffffe0057de6a00 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057de0380 [virtio_balloon] 100065 D - 0xffffffff8280cd80 [deadlkres] 100069 D - 0xfffffe00593fd500 [acpi_task_0] 100070 D - 0xfffffe00593fd500 [acpi_task_1] 100071 D - 0xfffffe00593fd500 [acpi_task_2] 100073 D - 0xfffffe000776ab00 [mca taskq] 100074 D - 0xfffffe0007769700 [CAM taskq] 100076 D - 0xfffffe00593fd400 [ipsec_offload] 863 763 763 0 Z syz-executor db> show all locks Process 864 (syz-executor) thread 0xfffffe0054109000 (100209) exclusive lockmgr ufs (ufs) r = 0 (0xfffffe006dfa7228) locked @ /syzkaller/managers/main/kernel/sys/kern/vfs_subr.c:3386 Process 857 (syz-executor) thread 0xfffffe005411e000 (100204) exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffffe006b733980) locked @ /syzkaller/managers/main/kernel/sys/kern/uipc_socket.c:4835 Process 12 (intr) thread 0xfffffe0007821780 (100033) exclusive sleep mutex tcphash (tcphash) r = 0 (0xfffffe00077e8a00) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:2734 exclusive rw tcpinp (tcpinp) r = 0 (0xfffffe00777b0020) locked @ /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:1471 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 384 5188K 526 tcp_hpts 7 4801K 7 devbuf 4187 4324K 4213 sysctloid 35455 2089K 35530 vtbuf 24 1968K 46 kobj 331 1324K 504 newblk 30 1032K 936 vfscache 3 1025K 3 pcb 95 746K 144 inodedep 21 520K 185 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 143 286K 944 vnet_data 2 224K 2 acpitask 1 224K 1 filedesc 28 217K 143 KTRACE 102 201K 3097 acpica 1674 184K 54444 vmem 5 144K 6 tidhash 3 141K 3 pagedep 13 131K 72 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 107 107K 124 sem 4 106K 4 gtaskqueue 18 98K 18 bus 1000 82K 5086 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 523 66K 524 ddb_capture 1 64K 1 kdtrace 207 40K 1076 umtx 304 38K 304 BPF 23 36K 23 shm 2 34K 2 hostcache 1 32K 1 DEVFS3 126 32K 136 msg 4 30K 4 kbdmux 6 28K 6 temp 33 22K 1893 DEVFS_RULE 56 20K 56 routetbl 127 19K 402 ifaddr 66 19K 68 LRO 18 19K 18 ufs_mount 4 17K 5 proc 3 17K 3 tty 16 16K 16 ithread 90 15K 90 bus-sc 34 15K 1657 eventhandler 163 14K 163 sctp_atcl 34 13K 41 lltable 42 13K 42 ifnet 7 13K 7 kenv 95 12K 95 GEOM 54 12K 457 cred 29 11K 204 ether_multi 129 11K 144 CAM queue 5 11K 1528 rman 82 10K 437 rpc 8 9K 8 plimit 23 9K 349 bmsafemap 3 9K 134 devstat 4 9K 4 UART 12 9K 12 filemon 1 8K 2 ksem 1 8K 1 shmfd 1 8K 1 pfs_vncache 1 8K 1 audit_evclass 240 8K 306 in6_multi 55 8K 56 taskqueue 69 8K 69 sglist 6 7K 6 CAM DEV 3 6K 510 pfs_nodes 22 6K 22 mount 66 6K 164 kqueue 69 5K 927 pf_ifnet 13 5K 23 ufs_dirhash 24 5K 27 UMA 271 5K 271 vt 11 5K 11 pf_table 2 4K 3 memdesc 1 4K 1 MCA 32 4K 32 md_disk 1 4K 1 evdev 4 4K 4 pwddesc 63 4K 870 acpisem 28 4K 28 DEVFSP 47 3K 59 terminal 11 3K 11 session 22 3K 34 proc-args 87 3K 1916 uidinfo 5 3K 11 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 kcovinfo 36 3K 36 netlink 2 3K 70 local_apic 1 2K 1 io_apic 1 2K 1 ipsec-saq 2 2K 2 lockf 19 2K 233 selfd 31 2K 16540 Unitno 29 2K 50 ip6ndp 11 2K 11 CAM XPT 22 2K 543 sctp_ifa 12 2K 13 in_multi 6 2K 8 tun 4 2K 4 toponodes 6 2K 6 ipsecpolicy 2 2K 2 select 11 2K 30 CC Mem 10 2K 30 msi 9 2K 9 sctp_atky 34 2K 41 softdep 1 1K 1 dirrem 4 1K 109 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 16 NFSD session 1 1K 1 newdirblk 7 1K 53 diradd 7 1K 128 CAM periph 4 1K 271 ipsec 3 1K 3 sctp_ifn 6 1K 13 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 6 pci_link 10 1K 10 osd 15 1K 47 mkdir 5 1K 106 freefile 5 1K 80 crypto 4 1K 16 encap_export_host 12 1K 12 freework 3 1K 109 inpcbpolicy 18 1K 223 sctp_athm 34 1K 41 freeblks 2 1K 67 cdev 2 1K 2 lkpikmalloc 8 1K 9 counter_rate 13 1K 13 chacha20random 1 1K 1 biobuf 1 1K 1 freefrag 2 1K 54 indirdep 1 1K 121 VN POLL 2 1K 4 vnodes 1 1K 2 ktls 1 1K 7 procdesc 2 1K 8 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 soname 5 1K 3319 pf_rule 1 1K 1 cryptodev 2 1K 48 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 4 pmchooks 1 1K 1 filecaps 5 1K 76 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 sctp_vrf 1 1K 1 vnet 1 1K 1 iov 1 1K 13898 pmc 1 1K 1 entropy 2 1K 33 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 sctp_mcore 0 0K 0 sctp_socko 0 0K 3 sctp_iter 0 0K 10 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_a_it 0 0K 10 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 tcp_pcm_rack 0 0K 0 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 0 pf 0 0K 4 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 mqdata 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 153 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 7 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 1 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6opt 0 0K 3 ip6_msource 0 0K 1 ip6_moptions 0 0K 2 in6_mfilter 0 0K 2 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 0 in_mfilter 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 21 fadvise 0 0K 0 statfs 0 0K 184 namei_tracker 0 0K 1 inotify 0 0K 2 export_host 0 0K 0 cl_savebuf 0 0K 28 lio 0 0K 2 acl 0 0K 0 mbuf_tag 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 ioctlops 0 0K 96 eventfd 0 0K 1 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 208 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 646 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 0 rctl 0 0K 0 cache 0 0K 0 jaildesc 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 78 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 ufshci 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 12480 0 254 38494208 0 mbuf 256 8618 1044 17041 0 254 2473472 0 tcp_log 416 1018 4832 9523 0 254 2433600 0 BUF TRIE 152 236 11568 827 0 62 1794208 0 malloc-384 384 4140 30 4157 0 30 1601280 0 malloc-128 128 11657 61 11670 0 126 1499904 0 malloc-4096 4096 334 4 593 0 2 1384448 0 UMA Slabs 0 112 11024 22 11024 0 126 1237152 0 RADIX NODE 152 6757 154 28251 0 62 1050472 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 malloc-65536 65536 14 1 18 0 1 983040 0 vmem btag 56 16797 90 16797 0 254 945672 0 FFS inode 1168 536 45 618 0 8 678608 0 malloc-64 64 637 8561 19991 0 254 588672 0 socket 1024 69 439 1467 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 pbuf 2624 0 190 0 0 2 498560 0 256 Bucket 2048 181 3 1153 0 8 376832 0 VM OBJECT 248 1193 119 13881 0 62 325376 0 malloc-4096 4096 74 4 874 0 2 319488 0 malloc-2048 2048 141 11 400 0 8 311296 0 sctp_ep 1152 34 225 41 0 254 298368 0 VNODE 440 574 92 658 0 30 293040 0 THREAD 1860 142 10 209 0 8 282720 0 malloc-2048 2048 9 119 1046 0 8 262144 0 malloc-64 64 3892 203 3898 0 254 262080 0 malloc-16384 16384 13 2 69 0 1 245760 0 malloc-16 16 14614 136 14684 0 254 236000 0 DEVCTL 1024 23 193 149 0 0 221184 0 UMA Zones 768 243 1 243 0 16 187392 0 malloc-32 32 5365 305 5409 0 254 181440 0 malloc-128 128 1226 169 25595 0 126 178560 0 malloc-256 256 87 603 1127 0 62 176640 0 lkpimm 56 1 3095 1 0 254 173376 0 unpcb 320 15 501 1172 0 254 165120 0 malloc-32768 32768 0 5 92 0 1 163840 0 FFS2 dinode 256 536 94 618 0 62 161280 0 MAP ENTRY 96 1416 222 43650 0 126 157248 0 malloc-1024 1024 118 26 308 0 16 147456 0 FPU_save_area 832 144 18 247 0 16 134784 0 S VFS Cache 104 1007 280 1111 0 126 133848 0 malloc-65536 65536 0 2 51 0 1 131072 0 malloc-65536 65536 0 2 110 0 1 131072 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-65536 65536 1 1 9 0 1 131072 0 malloc-32768 32768 2 2 14 0 1 131072 0 mbuf_packet 256 2 506 172 0 254 130048 0 ksiginfo 112 57 987 81 0 126 116928 0 pf anchors 1664 1 69 1 0 64 116480 0 malloc-128 128 619 280 1560 0 126 115072 0 PROC 1368 63 14 865 0 8 105336 0 malloc-128 128 694 81 4038 0 126 99200 0 malloc-32768 32768 3 0 3 0 1 98304 0 malloc-8192 8192 9 2 93 0 1 90112 0 UMA Kegs 384 229 4 229 0 30 89472 0 ertt_txseginfo 40 0 2121 1964 0 254 84840 0 filedesc0 1072 63 14 870 0 8 82544 0 malloc-16384 16384 5 0 7 0 1 81920 0 malloc-4096 4096 15 5 214 0 2 81920 0 malloc-256 256 188 127 748 0 62 80640 0 malloc-8192 8192 9 0 12 0 1 73728 0 g_bio 408 0 180 6632 0 30 73440 0 128 Bucket 1024 49 18 254 0 16 68608 0 malloc-64 64 815 256 2445 0 254 68544 0 tcp_bbr_map 128 0 527 332 0 126 67456 0 malloc-32768 32768 0 2 2 0 1 65536 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-4096 4096 12 4 497 0 2 65536 0 malloc-1024 1024 26 38 557 0 16 65536 0 64 Bucket 512 86 42 1772 0 30 65536 0 malloc-256 256 146 109 982 0 62 65280 0 malloc-256 256 192 63 314 0 62 65280 0 malloc-384 384 61 89 568 0 30 57600 0 malloc-256 256 37 158 298 0 62 49920 0 32 Bucket 256 77 118 413 0 62 49920 0 DIRHASH 1024 34 14 36 0 16 49152 0 NAMEI 1024 1 47 13278 0 16 49152 0 malloc-16384 16384 1 2 191 0 1 49152 0 malloc-384 384 71 49 74 0 30 46080 0 malloc-384 384 65 55 593 0 30 46080 0 malloc-384 384 84 36 84 0 30 46080 0 syncache 168 0 264 3 0 254 44352 0 Files 80 256 294 7321 0 126 44000 0 tcp_inpcb 1304 10 23 30 0 8 43032 0 clpbuf 2624 0 16 46 0 4 41984 0 pcpu-8 8 4799 321 4985 0 254 40960 0 VMSPACE 584 40 30 844 0 16 40880 0 udp_inpcb 408 6 84 146 0 30 36720 0 malloc-64 64 23 544 13819 0 254 36288 0 malloc-64 64 31 536 51 0 254 36288 0 malloc-64 64 219 348 1120 0 254 36288 0 malloc-64 64 73 494 949 0 254 36288 0 malloc-128 128 20 259 170 0 126 35712 0 malloc-128 128 11 268 141 0 126 35712 0 malloc-128 128 123 156 590 0 126 35712 0 malloc-128 128 32 247 294 0 126 35712 0 routing nhops 256 26 109 33 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-256 256 30 105 483 0 62 34560 0 malloc-256 256 7 128 178 0 62 34560 0 malloc-256 256 20 115 288 0 62 34560 0 malloc-2048 2048 0 16 12 0 8 32768 0 malloc-2048 2048 2 14 2 0 8 32768 0 malloc-2048 2048 10 6 38 0 8 32768 0 malloc-2048 2048 3 13 50 0 8 32768 0 malloc-2048 2048 10 6 35 0 8 32768 0 malloc-2048 2048 8 8 10 0 8 32768 0 malloc-1024 1024 3 29 47 0 16 32768 0 malloc-1024 1024 18 14 1011 0 16 32768 0 malloc-1024 1024 2 30 6 0 16 32768 0 malloc-1024 1024 3 29 8 0 16 32768 0 malloc-1024 1024 2 30 3 0 16 32768 0 malloc-512 512 0 64 110 0 30 32768 0 malloc-512 512 14 50 31 0 30 32768 0 malloc-512 512 0 64 14 0 30 32768 0 malloc-512 512 2 62 51 0 30 32768 0 malloc-512 512 14 50 37 0 30 32768 0 malloc-512 512 2 62 20 0 30 32768 0 malloc-512 512 6 58 7 0 30 32768 0 pcpu-64 64 501 11 501 0 254 32768 0 ttyinq 160 135 65 300 0 62 32000 0 PGRP 120 26 238 38 0 126 31680 0 sctp_laddr 48 0 588 11 0 254 28224 0 malloc-32 32 387 495 4833 0 254 28224 0 16 Bucket 144 56 140 278 0 62 28224 0 4 Bucket 48 9 579 13 0 254 28224 0 AIO 208 1 132 9 0 62 27664 0 da_ccb 544 0 49 1770 0 16 26656 0 udplite_inpcb 408 0 63 35 0 30 25704 0 TURNSTILE 136 153 36 153 0 62 25704 0 cpuset 200 8 120 50 0 62 25600 0 malloc-8192 8192 3 0 3 0 1 24576 0 malloc-4096 4096 4 2 44 0 2 24576 0 pipe 736 20 13 328 0 16 24288 0 PWD 40 24 582 132 0 254 24240 0 rtentry 168 29 115 33 0 62 24192 0 8 Bucket 80 58 242 330 0 126 24000 0 malloc-384 384 1 59 2 0 30 23040 0 malloc-384 384 12 48 12 0 30 23040 0 ripcb 376 2 58 12 0 30 22560 0 Mountpoints 2816 2 6 2 0 4 22528 0 SLEEPQUEUE 88 153 103 153 0 126 22528 0 hostcache 64 1 314 1 0 254 20160 0 ertt 72 10 270 30 0 126 20160 0 malloc-64 64 3 312 3 0 254 20160 0 malloc-32 32 61 569 409 0 254 20160 0 malloc-32 32 21 609 142 0 254 20160 0 malloc-32 32 157 473 1391 0 254 20160 0 malloc-32 32 55 575 84 0 254 20160 0 malloc-32 32 119 511 128 0 254 20160 0 malloc-32 32 16 614 17 0 254 20160 0 2 Bucket 32 62 568 371 0 254 20160 0 KNOTE 160 1 124 20 0 62 20000 0 AIOCB 552 0 35 9 0 16 19320 0 ktls_session 256 0 75 1 0 62 19200 0 L VFS Cache 320 0 60 12 0 30 19200 0 AIOLIO 272 0 70 2 0 30 19040 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 0 2 21 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-4096 4096 0 4 5 0 2 16384 0 malloc-4096 4096 1 3 5 0 2 16384 0 malloc-1024 1024 0 16 1 0 16 16384 0 malloc-512 512 2 30 2 0 30 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 tcp_bbr_pcb 896 0 18 1 0 16 16128 0 rl_entry 48 4 332 7 0 254 16128 0 malloc-16 16 535 465 3446 0 254 16000 0 kenv 258 17 43 1067 0 30 15480 0 mqnode 416 3 33 3 0 30 14976 0 domainset 40 0 315 42 0 254 12600 0 SMR SHARED 24 8 503 8 0 254 12264 0 vtnet_tx_hdr 24 0 501 3238 0 254 12024 0 malloc-16 16 45 705 1427 0 254 12000 0 malloc-16 16 10 740 17 0 254 12000 0 malloc-16 16 41 709 101 0 254 12000 0 malloc-16 16 50 700 25618 0 254 12000 0 malloc-16 16 16 734 19 0 254 12000 0 malloc-16 16 41 709 50 0 254 12000 0 itimer 352 0 33 2 0 30 11616 0 splice 184 0 63 1 0 62 11592 0 malloc-384 384 1 29 2 0 30 11520 0 swrbuf 2624 0 4 4 0 4 10496 0 malloc-8192 8192 0 1 34 0 1 8192 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-4096 4096 0 2 1 0 2 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 17 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf fragment node 72 0 0 0 0 126 0 0 pf frags 232 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 0 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf Ethernet anchors 1240 0 0 0 0 64 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rack_pcb 1088 0 0 0 0 8 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 sctp_raddr 736 0 0 0 0 254 0 0 sctp_asoc 2256 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcpreass 48 0 0 0 0 254 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 cryptop 280 0 0 0 0 30 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 88 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/bl tcpcb at 0xfffffe00777b0000 t_segq first: 0 t_segqlen: 0 t_dupacks: 0 t_callout: 0xfffffe00777b0188 t_timers: 0xfffffe00777b01c8 t_state: 2 (TCPS_SYN_SENT) t_flags: 0x100002a0 (TF_REQ_SCALE, TF_REQ_TSTMP, TF_SACK_PERMIT, TF_LRD) t_flags2: 0xa (TF2_PLPMTU_PMTUD, TF2_LOG_AUTO) snd_una: 0x4773da62 snd_max: 0x4773da63 snd_nxt: 0x4773da63 snd_up: 0x4773da62 snd_wl1: 0x00000000 snd_wl2: 0x00000000 iss: 0x4773da62 irs: 0x00000000 rcv_nxt: 0x00000000 rcv_adv: 0x0000ffff rcv_wnd: 65536 rcv_up: 0x00000000 snd_wnd: 0 snd_cwnd: 1073725440 snd_ssthresh: 1073725440 snd_recover: 0x4773da62 t_rcvtime: 2147426925 t_startime: 0 t_rttime: 2147426925 t_rtsq: 0x4773da62 t_rxtcur: 100 t_maxseg: 1220 t_srtt: 0 t_rttvar: 400 t_rxtshift: 0 t_rttmin: 3 t_rttupdated: 0 max_sndwnd: 0 t_softerror: 0 t_oobflags: 0x0 () t_iobc: 0x00 snd_scale: 0 rcv_scale: 0 request_r_scale: 6 ts_recent: 0 ts_recent_age: 0 ts_offset: 2521617445 last_ack_sent: 0x00000000 snd_cwnd_prev: 0 snd_ssthresh_prev: 0 snd_recover_prev: 0x00000000 t_badrxtwin: 0 snd_numholes: 0 snd_holes first: 0 snd_fack: 0x00000000 rcv_numsacks: 0 t_rttlow: 0 rfbuf_ts: 33772 rfbuf_cnt: 0 t_fb.tfb_tcp_block_name: freebsd t_cc.name: cubic _t_logstate: 1 (TCP_LOG_STATE_TAIL) t_lognum: 6 t_loglimit: 5000 t_logsn: 6 0.000 ATTACH, error: 0 +0.000 Starting Keepalive timer: 75000 ms +0.000 > S 1198774882:1198774882(0) win 65535 +0.000 Starting Retransmission timer: 1000 ms +0.000 CONNECT, error: 0 +0.000 < R. 0:0(0) ack 1198774883 win 0